Description (CNA)
In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Progress Software Corporation / MOVEit Transfer | affected 2022.0.0 (14.0.0) before 2022.0.10 (14.0.10); affected 2022.1.0 (14.1.0) before 2022.1.11 (14.1.11); affected 2023.0.0 (15.0.0) before 2023.0.8 (15.0.8); affected 2023.1.0 (15.1.0) before 2023.1.3 (15.1.3) |
CWE
CWE-20
References
- https://www.progress.com/moveit
- https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-January-2024
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.