MOVEit Transfer: Improper Authentication (CVE-2024-5806) #shorts #breaking

CVE

This CVE relates to an Improper Authentication vulnerability in Progress MOVEit Transfer, specifically in its SFTP module. Published on June 25, 2024, this zero-day vulnerability allows attackers to bypass authentication and gain unauthorized access to the system. Affected versions include MOVEit Transfer from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, and from 2024.0.0 before 2024.0.2. All users of Progress MOVEit Transfer should be aware of this serious issue, as it compromises the system's security by enabling unauthorized access.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://www.progress.com/moveit
• https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-June-2024-CVE-2024-5806