CVE-2024-2291

Published: Mar 20, 2024Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.1.4 (15.1.4), a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which results in user activity not being logged properly.

Affected (4)

Products: Progress: Moveit Transfer

Progress

1 product

Moveit Transfer

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Progress Moveit Transfer	Before 2022.0.11
Progress Moveit Transfer	From 2022.1.0 to 2022.1.12
Progress Moveit Transfer	From 2023.0.0 to 2023.0.9
Progress Moveit Transfer	From 2023.1.0 to 2023.1.4