CVE-2025-2324

Published Mar 19, 2025

Last updated 20 days ago

Overview

Description
Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, from 2024.1.0 before 2024.1.2.
Source
security@progress.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.9
Impact score
4.2
Exploitability score
1.6
Vector string
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Severity
MEDIUM

Weaknesses

security@progress.com
CWE-269

Social media

Hype score
Not currently trending