CVE-2024-5806CWE-287

MOVEit Transfer Authentication Bypass Vulnerability

Critical · published June 25, 2024

Patch now

High probability of exploitation

CVSS calls it critical at 9.1. It sits in the 99.6th percentile for exploit probability.

CVSS v3.1
9.1
EPSS
81%
Percentile
99.6
In the wild
Unconfirmed
What it is

🚨 An authentication bypass is lurking in Progress MOVEit Transfer, allowing attackers to slip in unnoticed like a ghost at a party! 🔥 Think of it as a hotel where anyone can check into any room without showing ID — a recipe for chaos and disarray. Without proper authentication checks, attackers can waltz right in and access sensitive data, much like a trespasser enjoying all the hotel's amenities without paying a dime. An attacker could exploit this vulnerability to bypass authentication altogether, gaining unauthorized access to the system. This means they could potentially view, modify, or delete sensitive files, putting critical data at serious risk. The consequences could be absolutely devastating, leading to financial loss and reputational damage.

Put simply

Think of it as a hotel where anyone can check into any room without showing ID — a recipe for chaos and disarray. Without proper authentication checks, attackers can waltz right in and access sensitive data, much like a trespasser enjoying all the hotel's amenities without paying a dime. The improper authentication vulnerability in the SFTP module of Progress MOVEit Transfer allows users to bypass authentication mechanisms in versions before 2023.0.11, 2023.1.6, and 2024.0.2.

What to do

An attacker could exploit this vulnerability to bypass authentication altogether, gaining unauthorized access to the system. This means they could potentially view, modify, or delete sensitive files, putting critical data at serious risk. The consequences could be absolutely devastating, leading to financial loss and reputational damage. Immediate action is crucial! Patch to the latest versions, specifically 2023.0.11, 2023.1.6, or 2024.0.2, to close this vulnerability. Ensure that proper authentication checks are in place to prevent unauthorized access, and conduct a security audit of your current setup. You've got this! Follow these steps, and you'll fortify your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.81474 · 99.6th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-06-25T15:04Z
EPSS history
Timeline
  • 25 JUN 15:04Z
    MOVEit Transfer Authentication Bypass Vulnerability
    cvelistv5