CVE-2024-5806: Progress MOVEit Transfer Authentication Bypass Vulnerability

Progress Software has patched a high severity authentication bypass in the MOVEit managed file transfer (MFT) solution. As MOVEit has been a popular target for ransomware gangs and other threat actors, we strongly recommend prioritizing patching of this vulnerability.

Background

On June 25, Progress published an advisory for a vulnerability in MOVEit Transfer, a secure managed file transfer (MFT) solution:

CVEDescriptionCVSSv3CVE-2024-5806MOVEit Transfer Authentication Bypass Vulnerability7.4

Analysis

CVE-2024-5806 is an authentication bypass vulnerability affecting the SSH File Transfer …

advisory authentication authentication bypass bypass bypass vulnerability cve cve-2024 file file transfer gangs high june managed managed file transfer mft moveit moveit transfer patching popular progress progress software ransomware ransomware gangs severity software solution target threat threat actors transfer vulnerability