Lucene search
+L

586 matches found

CVE
CVE
added 2024/06/25 3:4 p.m.149 views

CVE-2024-5806

CVE-2024-5806 affects the MOVEit Transfer SFTP module. The issue is an Improper Authentication vulnerability that can lead to an Authentication Bypass . Affected versions include MOVEit Transfer 2023.0.x prior to 2023.0.11, 2023.1.x prior to 2023.1.6, and 2024.0.x prior to 2024.0.2. Root cause is...

9.8CVSS9.2AI score0.81474EPSS
SaveIn wildExploits3References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/25 3:3 p.m.21 views

CVE-2024-5805 MOVEit Gateway Authentication Bypass Vulnerability

Improper Authentication vulnerability in Progress MOVEit Gateway SFTP modules allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0...

9.1CVSS7AI score0.07615EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/06/25 3:3 p.m.33 views

CVE-2024-5805 MOVEit Gateway Authentication Bypass Vulnerability

Improper Authentication vulnerability in Progress MOVEit Gateway SFTP modules allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0...

9.1CVSS0.07615EPSS
SaveExploits0References2
CVE
CVE
added 2024/06/25 3:3 p.m.72 views

CVE-2024-5805

CVE-2024-5805 is an improper authentication vulnerability in Progress MOVEit Gateway (SFTP module) that allows authentication bypass affecting MOVEit Gateway 2024.0.0. A fix exists in MOVEit Gateway 2024.0.1; 2024.0.0 remains vulnerable. Vendor advisories and national/corporate feeds confirm patc...

9.1CVSS9.4AI score0.07615EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/25 12:0 a.m.10 views

PT-2024-37169 · Progress · Progress Moveit Gateway

Name of the Vulnerable Software and Affected Versions: Progress MOVEit Gateway version 2024.0.0 Description: The issue is related to an Improper Authentication vulnerability in the SFTP modules of Progress MOVEit Gateway, allowing Authentication Bypass. Recommendations: For Progress MOVEit Gatewa...

9.1CVSS9.2AI score0.07615EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.59 views

Progress Software MOVEit Transfer Security Vulnerability

Progress Software MOVEit Transfer is a suite of automated file transfer software from Progress Software, USA. The software supports file transfer and provides file transfer activity monitoring. A security vulnerability exists in Progress Software MOVEit Transfer that stems from an incorrect...

9.8CVSS6.8AI score0.81474EPSS
SaveExploits3References2
VulnCheck KEV
VulnCheck KEV
added 2024/06/25 12:0 a.m.5 views

VulnCheck KEV: CVE-2024-5806

Improper Authentication vulnerability in Progress MOVEit Transfer SFTP module can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.v...

9.8CVSS7.3AI score0.81474EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
added 2024/06/25 12:0 a.m.7 views

PT-2024-4321

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions 2023.0.0 through 2023.0.10 MOVEit Transfer versions 2023.1.0 through 2023.1.5 MOVEit Transfer versions 2024.0.0 through 2024.0.1 Description The issue is related to an Improper Authentication vulnerability in the SFTP...

9.8CVSS7.5AI score0.81474EPSS
SaveExploits3References54
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.6 views

Progress Software MOVEit Security Vulnerability

Progress Software MOVEit is a secure hosted file transfer software from Progress Software, USA. A security vulnerability exists in Progress Software MOVEit Gateway version 2024.0.0 that stems from the presence of an incorrect authentication vulnerability that allows bypassing authentication...

9.1CVSS7AI score0.07615EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/06/24 4:28 p.m.719 views

Exploit for Improper Authentication in Progress Moveit_Transfer

CVE-2024-5806 Exploit for Progress MOVEit Transfer CVE-2024-5...

9.8CVSS9.4AI score0.81474EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2024/05/30 12:0 a.m.34 views

Ipswitch MOVEit DMZ < 2024.0.0 (16_0_0)

The version of Ipswitch MOVEit DMZ installed on the remote host is prior to 2024.0.0. It is, therefore, affected by a vulnerability as referenced in the 000258478 advisory. - The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficie...

7.5CVSS7AI score0.00235EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/22 5:16 p.m.5 views

CVE-2024-4563

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

7.5CVSS5.8AI score0.00235EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/22 5:16 p.m.24 views

CVE-2024-4563

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

7.5CVSS6.2AI score0.00235EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/22 5:1 p.m.29 views

CVE-2024-4563 The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

6.1CVSS6.2AI score0.00235EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/22 5:1 p.m.17 views

CVE-2024-4563 The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

6.1CVSS6.8AI score0.00235EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/22 5:1 p.m.76 views

CVE-2024-4563

The CVE-2024-4563 entry concerns Progress MOVEit Automation: the configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length. Reported impact in the sources aligns with potential Confidentiality impact (C:H) per CVSS, with the attack vector/network and...

7.5CVSS6.2AI score0.00235EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/05/22 12:0 a.m.7 views

Progress Software Progress MOVEit Automation 安全漏洞

Progress Software Progress MOVEit Automation is a suite of hosted file transfer software from Progress Software, USA. The software supports features such as sensitive data transfer and workflow automation. A security vulnerability exists in Progress Software Progress MOVEit Automation that stems...

7.5CVSS6.6AI score0.00235EPSS
SaveExploits0References3
NVD
NVD
added 2024/03/20 3:15 p.m.14 views

CVE-2024-2291

In Progress MOVEit Transfer versions released before 2022.0.11 14.0.11, 2022.1.12 14.1.12, 2023.0.9 15.0.9, 2023.1.4 15.1.4, a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which result...

4.3CVSS4.5AI score0.00385EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/20 3:15 p.m.10 views

CVE-2024-2291

In Progress MOVEit Transfer versions released before 2022.0.11 14.0.11, 2022.1.12 14.1.12, 2023.0.9 15.0.9, 2023.1.4 15.1.4, a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which result...

4.3CVSS5.7AI score0.00385EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/20 2:46 p.m.11 views

CVE-2024-2291 MOVEit Transfer Logging Bypass Vulnerability

In Progress MOVEit Transfer versions released before 2022.0.11 14.0.11, 2022.1.12 14.1.12, 2023.0.9 15.0.9, 2023.1.4 15.1.4, a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which result...

4.3CVSS6.7AI score0.00385EPSS
SaveExploits0References2
Rows per page
Query Builder