PT-2023-3478 · Progress · Moveit Transfer
Publicado
2023-06-28
·
Atualizado
2023-12-13
·
CVE-2023-36933
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
MOVEit Transfer versions prior to 2021.0.9 (13.0.9)
MOVEit Transfer versions prior to 2021.1.7 (13.1.7)
MOVEit Transfer versions prior to 2022.0.7 (14.0.7)
MOVEit Transfer versions prior to 2022.1.8 (14.1.8)
MOVEit Transfer versions prior to 2023.0.4 (15.0.4)
Description
The issue is related to an incorrect implementation of a sequence of actions in the Progress MOVEit Transfer software, which can be exploited by a remote attacker to cause a denial of service. This can be achieved by invoking a method that results in an unhandled exception, causing the MOVEit Transfer application to terminate unexpectedly.
Recommendations
For versions prior to 2021.0.9 (13.0.9), update to version 2021.0.9 (13.0.9) or later.
For versions prior to 2021.1.7 (13.1.7), update to version 2021.1.7 (13.1.7) or later.
For versions prior to 2022.0.7 (14.0.7), update to version 2022.0.7 (14.0.7) or later.
For versions prior to 2022.1.8 (14.1.8), update to version 2022.1.8 (14.1.8) or later.
For versions prior to 2023.0.4 (15.0.4), update to version 2023.0.4 (15.0.4) or later.
Correção
Improper Handling of Exceptional Conditions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Moveit Transfer