peter bassill · operator
$ cve CVE-2024-5806 JSON

CVE-2024-5806

9.1
CRITICAL · CVSS 3.1 · EPSS 81.5% (pctl 100)

Patch early

EPSS 81.5% — above the 10% action threshold.

Description

Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.

Scoring

CVSS9.1 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS81.47% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-287
On CISA KEVno
Public exploitnone known
Published2024-06-25
Last modified2026-06-17

Affected (1)

VendorProduct
progressmoveit transfer

References

→ the Explorer  ·  watch your stack  ·  NVD