CVE-2024-2291: MOVEit Transfer Logging Bypass Vulnerability
In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.1.4 (15.1.4), a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which results in user activity not being logged properly.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2291?
CVE-2024-2291 has been classified as a medium severity vulnerability.
Who is affected by CVE-2024-2291?
CVE-2024-2291 affects Progress MOVEit Transfer versions prior to 2022.0.11, 2022.1.12, 2023.0.9, and 2023.1.4.
How do I fix CVE-2024-2291?
To fix CVE-2024-2291, update your Progress MOVEit Transfer software to the latest versions that are not vulnerable.
What kind of vulnerability is CVE-2024-2291?
CVE-2024-2291 is a logging bypass vulnerability that allows an authenticated user to manipulate requests.
What impact does CVE-2024-2291 have on the system?
CVE-2024-2291 can compromise the integrity of the logging mechanism, potentially allowing unauthorized actions to go undetected.