Lucene search

MitreCVE-2023-36933

HistoryJul 05, 2023 - 4:15 p.m.

CVE-2023-36933

2023-07-0516:15:09

CWE-755

mitre

web.nvd.nist.gov

cve-2023-36933

moveit transfer

vulnerability

nvd

security

2021.0.9

2021.1.7

2022.0.7

2022.1.8

2023.0.4

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

47.8%

JSON

In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause the MOVEit Transfer application to terminate unexpectedly.

Affected configurations

Nvd

Node

progressmoveit_transferRange<2020.1.11

progressmoveit_transferRange2021.0–2021.0.9

progressmoveit_transferRange2021.1.0–2021.1.7

progressmoveit_transferRange2022.0.0–2022.0.7

progressmoveit_transferRange2022.1.0–2022.1.8

progressmoveit_transferRange2023.0.0–2023.0.4

VendorProductVersionCPE
progressmoveit_transfer*cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
progress	moveit_transfer	*	cpe:2.3:a:progress:moveit_transfer::::::::

References

community.progress.com/s/article/MOVEit-Transfer-2020-1-Service-Pack-July-2023

www.progress.com/moveit

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

47.8%

JSON

Related for CVE-2023-36933