Ransomwarecritical

Progress warns customers of a new critical flaw in MOVEit Transfer

Security Affairsby @securityaffairsJul 7, 2023 · 16:49 UTC (Jul 7, 2023)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-36934 CVE-2023-36932 CVE-2023-36933

Tags: cve-2023-36934 cve-2023-36932 cve-2023-36933 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36934 +2 related CVEs CVE-2023-36932 CVE-2023-36933	In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a…	9.1 group max	95%		Jul 5, 2023

From the original article

2 min read at securityaffairs.com

Progress released security patches for a new critical SQL injection vulnerability affecting its MOVEit Transfer software. Progress is informing customers of a new critical SQL injection vulnerability, tracked as CVE-2023-36934, in its MOVEit Transfer software. MOVEit Transfer software recently made the headlines due to the massive Clop ransomware hacking campaign exploiting a vulnerability in the product.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.