Vulnerabilities > CVE-2024-0396 - Unspecified vulnerability in Progress Moveit Transfer

CVSS 7.1 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

HIGH

network

low complexity

progress

NVD

Published: 2024-01-17

Updated: 2024-01-29

Summary

In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.

Vulnerable Configurations

Part	Description	Count
Application	Progress Progress Moveit Transfer 2023.1.0 Progress Moveit Transfer 2023.1.1 Progress Moveit Transfer 2023.1.2 Progress Moveit Transfer 2023.0.1 Progress Moveit Transfer 2023.0.2 Progress Moveit Transfer 2023.0.3 Progress Moveit Transfer 2023.0.4 Progress Moveit Transfer 2023.0.6 Progress Moveit Transfer 2023.0.7 Progress Moveit Transfer - Progress Moveit Transfer 2019.0.6 Progress Moveit Transfer 2019.0.7 Progress Moveit Transfer 2019.1 Progress Moveit Transfer 2019.1.3 Progress Moveit Transfer 2019.1.4 Progress Moveit Transfer 2019.1.5 Progress Moveit Transfer 2019.1.6 Progress Moveit Transfer 2019.2 Progress Moveit Transfer 2019.2.1 Progress Moveit Transfer 2019.2.2 Progress Moveit Transfer 2019.2.3 Progress Moveit Transfer 2020.0 Progress Moveit Transfer 2020.0.5 Progress Moveit Transfer 2020.0.6 Progress Moveit Transfer 2020.1 Progress Moveit Transfer 2020.1.1 Progress Moveit Transfer 2020.1.4 Progress Moveit Transfer 2020.1.5 Progress Moveit Transfer 2020.1.6 Progress Moveit Transfer 2020.1.10 Progress Moveit Transfer 2020.1.11 Progress Moveit Transfer 2021.0 Progress Moveit Transfer 2021.0.1 Progress Moveit Transfer 2021.0.3 Progress Moveit Transfer 2021.0.6 Progress Moveit Transfer 2021.0.7 Progress Moveit Transfer 2021.0.8 Progress Moveit Transfer 2021.0.9 Progress Moveit Transfer 2021.1.0 Progress Moveit Transfer 2021.1.4 Progress Moveit Transfer 2021.1.5 Progress Moveit Transfer 2021.1.6 Progress Moveit Transfer 2021.1.7 Progress Moveit Transfer 2021.1.8 Progress Moveit Transfer 2022.0.0 Progress Moveit Transfer 2022.0.4 Progress Moveit Transfer 2022.0.5 Progress Moveit Transfer 2022.0.6 Progress Moveit Transfer 2022.0.7 Progress Moveit Transfer 2022.0.8 Progress Moveit Transfer 2022.0.9 Progress Moveit Transfer 2022.1.0 Progress Moveit Transfer 2022.1.5 Progress Moveit Transfer 2022.1.6 Progress Moveit Transfer 2022.1.7 Progress Moveit Transfer 2022.1.8 Progress Moveit Transfer 2022.1.9 Progress Moveit Transfer 2022.1.10	58

Summary

Vulnerable Configurations

References