CVE-2024-6576CWE-287

MOVEit Transfer Privilege Escalation Vulnerability

High · published July 29, 2024

CVSS v3.1
7.3
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Privilege Escalation.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.12, from 2023.1.0 before 2023.1.7, from 2024.0.0 before 2024.0.3.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00623 · 49.2th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-07-29T13:46Z
EPSS history
Timeline
  • 29 JUL 13:46Z
    MOVEit Transfer Privilege Escalation Vulnerability
    cvelistv5