CVE-2024-5805: MOVEit Gateway Authentication Bypass Vulnerability
Published Jun 25, 2024
·Updated
Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.
Affected Software
1 affected component
Progress MOVEit Gateway=2024.0
Event History
Jun 25, 2024
CVE Published
via MITRE·03:03 PM
Data Sourced
via MITRE·03:03 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 26, 2024
News Published
via The Register·01:32 PM
News Published
via BleepingComputer·02:49 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-5805?
CVE-2024-5805 has a critical severity due to its potential for enabling unauthorized access through improper authentication.
2
How do I fix CVE-2024-5805?
To remediate CVE-2024-5805, users should upgrade to the latest version of Progress MOVEit Gateway that addresses the authentication bypass issue.
3
What versions of Progress MOVEit Gateway are affected by CVE-2024-5805?
CVE-2024-5805 specifically affects version 2024.0.0 of Progress MOVEit Gateway.
4
What type of vulnerability is CVE-2024-5805?
CVE-2024-5805 is classified as an improper authentication vulnerability leading to potential authentication bypass.
5
Who is impacted by CVE-2024-5805?
Organizations using Progress MOVEit Gateway version 2024.0.0 are impacted by CVE-2024-5805.