CVE-2023-6218

Published: Nov 29, 2023Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified. It is possible for a group administrator to elevate a group members permissions to the role of an organization administrator.

Affected (5)

Products: Progress: Moveit Transfer

Progress

1 product

Moveit Transfer

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Progress Moveit Transfer	Up to 2021.1.0
Progress Moveit Transfer	From 2022.0.0 to 2022.0.9
Progress Moveit Transfer	From 2022.1.0 to 2022.1.10
Progress Moveit Transfer	From 2023.0.0 to 2023.0.7
Progress Moveit Transfer	From 2023.1.0 to 2023.1.2