cve/2024/CVE-2024-5806.md

19 lines
815 B
Markdown
Raw Permalink Normal View History

2024-07-25 21:25:12 +00:00
### [CVE-2024-5806](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5806)
![](https://img.shields.io/static/v1?label=Product&message=MOVEit%20Transfer&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2023.0.0%3C%202023.0.11%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%20Improper%20Authentication&color=brighgreen)
### Description
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/Mr-xn/Penetration_Testing_POC
- https://github.com/nomi-sec/PoC-in-GitHub