CVE-2024-5806

MOVEit Transfer Authentication Bypass Vulnerability

CVSS 9.1 CRITICALEPSS 75.8%CWE-287

Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Progress · MOVEit Transfer

public PoCs found — 2

githubgithub.com/watchtowrlabs/watchTowr-vs-progress-moveit_CVE-2024-5806★ 45 githubgithub.com/sec13b/CVE-2024-5806★ 0

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-June-2024-CVE-2024-5806 https://www.progress.com/moveit