VDB
CVE-2024-5806
CVE-2024-5806
PUBLISHED
Es bestehen mehrere Schwachstellen in der Progress Software MOVEit. Diese Fehler bestehen im SFTP-Modul aufgrund einer nicht ordnungsgemäßen Authentifizierung. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um die Sicherheitsmaßnahmen zu umgehen.
EPSS 89.46% · 99.6th percentile
Risk Scores
EPSS Score
89.46%
99.6th percentile
Timeline
- Jun 25, 2024 CVE Published
- Jun 26, 2024 PoC Published
- Jun 26, 2024 EPSS Score
- Jul 8, 2024 PoC Published
- Jul 18, 2024 EPSS Score
- Aug 1, 2024 CVE Updated
- Sep 1, 2024 EPSS Score
- Sep 24, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Nov 8, 2024 EPSS Score
- Nov 12, 2024 PoC Published
- Nov 30, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1457.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1457 advisory
- https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-June-2024-CVE-2024-5806 advisory
- https://community.progress.com/s/article/MOVEit-Gateway-Critical-Security-Alert-Bulletin-June-2024-CVE-2024-5805 advisory
- https://labs.watchtowr.com/auth-bypass-in-un-limited-scenarios-progress-moveit-transfer-cve-2024-5806/ advisory
- https://www.borncity.com/blog/2024/06/26/progress-moveit-transfer-angriffe-auf-schwachstelle-cve-2024-5806/ advisory
- https://www.tenable.com/blog/cve-2024-5806-progress-moveit-transfer-authentication-bypass-vulnerability advisory