Progress Patched New MOVEit File Transfer Flaw that Allows Privilege Escalation

Progress, the company behind MOVEit Transfer, has issued a critical security alert addressing a newly discovered vulnerability in its MOVEit Transfer product.

The flaw, CVE-2024-6576, has been classified as a high-severity issue, with a CVSS score of 7.3, indicating a significant user risk.

CVE-2024-6576: Improper Authentication Leading to Privilege Escalation

The vulnerability found in the SFTP module of MOVEit Transfer stems from improper authentication mechanisms that could allow attackers to escalate their privileges. This issue affects several versions of MOVEit Transfer, specifically:

  • From 2023.0.0 before 2023.0.12
  • From 2023.1.0 before 2023.1.7
  • From 2024.0.0 before 2024.0.3

How to Build a Security Framework With Limited Resources IT Security Team (PDF) - Free Guide

Urgent Action Required

Progress strongly recommends that all affected customers upgrade to the latest patched versions to mitigate this security risk. The table below outlines the fixed versions available for download:

Fixed VersionDocumentationRelease Notes
MOVEit Transfer 2024.0.3 (16.0.3)Install and upgrade guideRelease Notes 2024.0
MOVEit Transfer 2023.1.7 (15.1.7)Install and upgrade guideRelease Notes 2023.1
MOVEit Transfer 2023.0.12 (15.0.12)Install and upgrade guideRelease Notes 2023.0

How to Upgrade

To upgrade, customers should:

  1. Log in to the Download Center at Progress Community using their Progress ID credentials.
  2. Select the appropriate asset from the “My Active” tab list.
  3. Click the download link under the “Related Products & Downloads” section.
  4. Download the fixed version from the table above.

If they have any questions or concerns, customers can open a new Technical Support case by logging into the Progress Community.

Those not under a current maintenance agreement are advised to contact the Progress Renewals team or their Progress partner account representative.

Progress emphasizes that upgrading to a patched release using the full installer is the only way to remediate this issue. Users will experience a system outage during the upgrade process.

Cloud customers, however, do not need to take any action as the cloud service has already been updated to the patched version.

Are you from SOC and DFIR Teams? – Analyse Malware Incidents & get live Access with ANY.RUN -> Free Access

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

QSC: Multi-Plugin Malware Framework Installs Backdoor on Windows

The QSC Loader service DLL named "loader.dll" leverages two distinct methods to obtain the path…

1 day ago

Weaponized LDAP Exploit Deploys Information-Stealing Malware

Cybercriminals are exploiting the recent critical LDAP vulnerabilities (CVE-2024-49112 and CVE-2024-49113) by distributing fake proof-of-concept…

1 day ago

New NonEuclid RAT Evades Antivirus and Encrypts Critical Files

A NonEuclid sophisticated C# Remote Access Trojan (RAT) designed for the.NET Framework 4.8 has been…

1 day ago

Hackers Targeting Users Who Lodged Complaints On Government portal To Steal Credit Card Data

Fraudsters in the Middle East are exploiting a vulnerability in the government services portal. By…

1 day ago

Juniper Networks Vulnerability Let Remote Attacker Execute Network Attacks

Juniper Networks has disclosed a significant vulnerability affecting its Junos OS and Junos OS Evolved…

1 day ago

Beware! Fake Crowdstrike Recruitment Emails Spread Cryptominer Malware

CrowdStrike, a leader in cybersecurity, uncovered a sophisticated phishing campaign that leverages its recruitment branding…

1 day ago