You’ve likely seen the news that threat actors are pwning people left and right via a vulnerability in the MOVEit file transfer software. But it now seems that there’s another vulnerability that is out there. This new vulnerability is tracked as CVE-2023-35708 and has put out a document on this vulnerability:
Progress has discovered a vulnerability in MOVEit Transfer that could lead to escalated privileges and potential unauthorized access to the environment. If you are a MOVEit Transfer customer, it is extremely important that you take immediate action as noted below in order to help protect your MOVEit Transfer environment. In Progress MOVEit Transfer versions released before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), 2023.0.3 (15.0.3), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an un-authenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint which could result in modification and disclosure of MOVEit database content.
And:
All MOVEit Transfer customers must take action and apply the patch to address the June 15th CVE-2023-35708 vulnerability discovered in MOVEit Transfer.
So the good news is that patches are already out there that addresses this. But I’m going back to the bad news. If you use MOVEit Cloud, this is the news that the company has for you:
Yesterday we reported the public posting of a new SQLi vulnerability that required us to take down HTTPs traffic for MOVEit Cloud and to ask MOVEit Transfer customers to take down their HTTP and HTTPs traffic to safeguard their environments. We have now tested and deployed a patch to MOVEit Cloud, returning it to full service across all cloud clusters. We have also shared this patch and the necessary deployment steps with all MOVEit Transfer customers.
All MOVEit Transfer customers must apply the new patch, released on June 16. 2023. Details on steps to take can be found in the following Knowledge Base Article.
Yeah. This keeps getting better and better. It’s as if MOVEit is the gift that keeps on giving for threat actors.
Related
This entry was posted on June 18, 2023 at 8:29 am and is filed under Commentary with tags Security. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Bad News… MOVEit Has More Vulnerabilities
You’ve likely seen the news that threat actors are pwning people left and right via a vulnerability in the MOVEit file transfer software. But it now seems that there’s another vulnerability that is out there. This new vulnerability is tracked as CVE-2023-35708 and has put out a document on this vulnerability:
Progress has discovered a vulnerability in MOVEit Transfer that could lead to escalated privileges and potential unauthorized access to the environment. If you are a MOVEit Transfer customer, it is extremely important that you take immediate action as noted below in order to help protect your MOVEit Transfer environment. In Progress MOVEit Transfer versions released before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), 2023.0.3 (15.0.3), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an un-authenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint which could result in modification and disclosure of MOVEit database content.
And:
All MOVEit Transfer customers must take action and apply the patch to address the June 15th CVE-2023-35708 vulnerability discovered in MOVEit Transfer.
So the good news is that patches are already out there that addresses this. But I’m going back to the bad news. If you use MOVEit Cloud, this is the news that the company has for you:
Yesterday we reported the public posting of a new SQLi vulnerability that required us to take down HTTPs traffic for MOVEit Cloud and to ask MOVEit Transfer customers to take down their HTTP and HTTPs traffic to safeguard their environments. We have now tested and deployed a patch to MOVEit Cloud, returning it to full service across all cloud clusters. We have also shared this patch and the necessary deployment steps with all MOVEit Transfer customers.
All MOVEit Transfer customers must apply the new patch, released on June 16. 2023. Details on steps to take can be found in the following Knowledge Base Article.
Yeah. This keeps getting better and better. It’s as if MOVEit is the gift that keeps on giving for threat actors.
Share this:
Like this:
Related
This entry was posted on June 18, 2023 at 8:29 am and is filed under Commentary with tags Security. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.