Background

Multiple vulnerabilities have recently been identified in the managed file transfer (MFT) software MOVEit developed by Ipswitch, Inc. and produced by Progress Software. These include CVE-2023-34362 ^[1], CVE-2023-35036 ^[2] and CVE-2023-35708 ^[3]. These vulnerabilities allow adversaries to gain unauthorized access and escalate privileges in the environment.

MOVEit is a popular tool that is used by thousands of organizations around the world. These include organizations in the public, private, and government sectors. The transfer software can be deployed …

access adversaries anomali cve cve-2023-34362 cve-2023-35036 cve-2023-35708 cyber threat intelligence environment file file transfer ipswitch managed managed file transfer mft moveit popular privileges progress progress software software tool transfer unauthorized access vulnerabilities