Progress Software’s MOVEit Transfer Hit by Major Security Flaw: Exploits Already in the Wild
A critical security flaw in Progress Software MOVEit Transfer, CVE-2024-5806, is already being exploited. This authentication bypass vulnerability could allow attackers to impersonate any user. Users must update to the latest versions to avoid risks.
Hot Take:
Progress Software just put the “MOVE” in MOVEit Transfer, but unfortunately, it’s hackers who are doing the moving…into your systems!
Key Points:
- Newly disclosed flaw CVE-2024-5806 affects multiple versions of MOVEit Transfer.
- Vulnerability allows authentication bypass, enabling attackers to impersonate users.
- Another critical flaw CVE-2024-5805 also affects MOVEit Gateway.
- Researchers highlight vulnerabilities in both Progress MOVEit and IPWorks SSH library.
- Approximately 2,700 MOVEit Transfer instances online, primarily in the U.S. and Europe.
Already a member? Log in here