New MOVEit vulnerability CVE-2023-36934 blocked by Imperva

2023-07-1015:50:43

Gabi Stapel

www.imperva.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.941 High

EPSS

Percentile

98.8%

JSON

On July 5, Progress Software released a security advisory for a new critical vulnerability in the MOVEit Transfer software, CVE-2023-36934. With a critical score of 9.1, this bug is a SQL injection vulnerability in the MOVEit Transfer web application with the potential to allow unauthorized access to the MOVEit database from unauthenticated attackers. A POC was released on July 9, and Imperva has already seen targeted attack attempts against customers.

For Imperva Cloud WAF and RASP customers, the exploits targeting this vulnerability are mitigated out of the box. Imperva WAF Gateway customers must enable the blocking policy if they use MOVEit software.

CVE-2023-36934 follows other recent MOVEit vulnerabilities like CVE-2023-34362, which was exploited in mass attacks by the Cl0p ransomware gang. Imperva customers are also protected against exploits targeting all previously released MOVEit vulnerabilities.If you have deployed MOVEit, it is recommended to upgrade to protected versions of the software or install patches as soon as possible.

Imperva is monitoring the situation and will provide updates as possible.

The post New MOVEit vulnerability CVE-2023-36934 blocked by Imperva appeared first on Blog.