MOVEit Transfer Authentication Bypass Vulnerability
Progress · MOVEit Transfer
The MOVEit Transfer product from Progress has an improper authentication flaw in its SFTP module that can lead to an authentication bypass. An attacker with network access can exploit it without credentials or user interaction, gaining unauthorised access with high impact to confidentiality and integrity.
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited the day it was disclosed. Public exploit code (PoC-in-GitHub) was available 1 day before disclosure.
- Public exploit codePoC-in-GitHub1 day before
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
What security researchers reported
Not named in any threat report yetAlso mentioned in 9 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.
- Credit AlienVault | clone ' We're not talking about cryptocurrency as much as we '14 Aug 2026
- Introducing Gh0stGambit: A Dropper for Deploying Gh0st RAT31 Jul 2024
- eSentire | Introducing Gh0stGambit: A Dropper for Deploying Gh0st RAT31 Jul 2024
- eSentire | Introducing Gh0stGambit: A Dropper for Deploying Gh0st RAT29 Jul 2024
- eSentire | Introducing Gh0stGambit: A Dropper for Deploying Gh0st RAT29 Jul 2024
- eSentire | Exploring the Infection Chain: ScreenConnect’s Link to…5 Jul 2024
- 3 more on OTX