Ransomwarecritical
Clop Starts MOVEit Extortion as New Bug is Discovered
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-34362 | Unauthenticated SQL Injection in Progress MOVEit Transfer | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-35036 | In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL injection… | 9.1 | 13% |
From the original article
2 min read at infosecurity-magazine.com
The Clop ransomware gang has begun publishing names of the organizations impacted by its recent data theft campaign, as MOVEit developer Progress Software warned customers of yet another newly discovered vulnerability. Yet to receive a CVE, the new bug is rated critical and “could lead to escalated privileges and potential unauthorized access to the environment,” Progress warned in an update yesterday.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.