_Arletta_Cwalina.jpg?disable=upscale&width=1200&height=630&fit=crop)
June 25, 2024 at 05:59PM
A critical security flaw in Progress Software’s MOVEit Transfer enables attackers to bypass authentication protocols and has been actively exploited shortly after being disclosed. The vulnerability, CVE-2024-5806 with CVSS 7.4, affects specific versions of MOVEit Transfer. Urgent patching is recommended due to the potential for cybercriminal exploitation and compromise of sensitive data at major enterprises.
The meeting notes highlight a high-severity security vulnerability in Progress Software’s MOVEit Transfer software. The vulnerability (CVE-2024-5806, CVSS: 7.4) is an improper authentication vulnerability in the SFTP module, potentially allowing authentication bypass in limited scenarios. It affects specific versions of MOVEit Transfer and is being actively exploited in the wild.
Admins are advised to patch the issue immediately to mitigate the risk, especially considering that MOVEit has previously been targeted in ransomware attacks. Cybercriminals are actively attempting to exploit the vulnerability, with reports of at least 1,800 exposed instances online. The potential impact of unauthorized access to internal files at large enterprises is highlighted as a significant concern.
Researchers have identified two potential attack scenarios, including the ability for a threat actor to impersonate any user on the system, upload an SSH public key, and gain elevated privileges. This presents a serious risk to data security and the integrity of affected systems.
It is crucial for all stakeholders to take this security advisory seriously and to implement the provided patching information to safeguard against potential exploitation.