CVE-2025-23244

Published May 1, 2025

Last updated 9 hours ago

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-23244 affects Progress MOVEit Transfer (SFTP module). It involves an Improper Privilege Management vulnerability. Specifically, users configured as Shared Accounts are susceptible to Privilege Escalation. The issue impacts MOVEit Transfer versions from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, and from 2024.1.0 before 2024.1.2. Additionally, CVE-2025-23244 has been identified in the NVIDIA GPU Display Driver for Linux. This vulnerability could allow an unprivileged attacker to escalate permissions, potentially leading to code execution, denial of service, information disclosure, and data tampering.

Description
NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Source
psirt@nvidia.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

psirt@nvidia.com
CWE-863

Social media

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score

1