Vulnerabilities > CVE-2024-2291 - Unspecified vulnerability in Progress Moveit Transfer

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

progress

NVD

Published: 2024-03-20

Updated: 2025-01-16

Summary

In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.1.4 (15.1.4), a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which results in user activity not being logged properly.

Vulnerable Configurations

Part	Description	Count
Application	Progress Progress Moveit Transfer 2023.1.0 Progress Moveit Transfer 2023.1.1 Progress Moveit Transfer 2023.1.2 Progress Moveit Transfer 2023.1.3 Progress Moveit Transfer 2023.0.0 Progress Moveit Transfer 2023.0.1 Progress Moveit Transfer 2023.0.2 Progress Moveit Transfer 2023.0.3 Progress Moveit Transfer 2023.0.4 Progress Moveit Transfer 2023.0.6 Progress Moveit Transfer 2023.0.7 Progress Moveit Transfer 2023.0.8 Progress Moveit Transfer 2022.1.0 Progress Moveit Transfer 2022.1.5 Progress Moveit Transfer 2022.1.6 Progress Moveit Transfer 2022.1.7 Progress Moveit Transfer 2022.1.8 Progress Moveit Transfer 2022.1.9 Progress Moveit Transfer 2022.1.10 Progress Moveit Transfer 2022.1.11 Progress Moveit Transfer - Progress Moveit Transfer 2019.0.6 Progress Moveit Transfer 2019.0.7 Progress Moveit Transfer 2019.1 Progress Moveit Transfer 2019.1.3 Progress Moveit Transfer 2019.1.4 Progress Moveit Transfer 2019.1.5 Progress Moveit Transfer 2019.1.6 Progress Moveit Transfer 2019.2 Progress Moveit Transfer 2019.2.1 Progress Moveit Transfer 2019.2.2 Progress Moveit Transfer 2019.2.3 Progress Moveit Transfer 2020.0 Progress Moveit Transfer 2020.0.5 Progress Moveit Transfer 2020.0.6 Progress Moveit Transfer 2020.1 Progress Moveit Transfer 2020.1.1 Progress Moveit Transfer 2020.1.4 Progress Moveit Transfer 2020.1.5 Progress Moveit Transfer 2020.1.6 Progress Moveit Transfer 2020.1.10 Progress Moveit Transfer 2020.1.11 Progress Moveit Transfer 2021.0 Progress Moveit Transfer 2021.0.1 Progress Moveit Transfer 2021.0.3 Progress Moveit Transfer 2021.0.6 Progress Moveit Transfer 2021.0.7 Progress Moveit Transfer 2021.0.8 Progress Moveit Transfer 2021.0.9 Progress Moveit Transfer 2021.1.0 Progress Moveit Transfer 2021.1.4 Progress Moveit Transfer 2021.1.5 Progress Moveit Transfer 2021.1.6 Progress Moveit Transfer 2021.1.7 Progress Moveit Transfer 2021.1.8 Progress Moveit Transfer 2022.0.0 Progress Moveit Transfer 2022.0.4 Progress Moveit Transfer 2022.0.5 Progress Moveit Transfer 2022.0.6 Progress Moveit Transfer 2022.0.7 Progress Moveit Transfer 2022.0.8 Progress Moveit Transfer 2022.0.9 Progress Moveit Transfer 2022.0.10	63

Summary

Vulnerable Configurations

References