cve-2023-34362

CRITICAL CVSS 9.8 vulncheck_kev

Description

Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or delete database elements.

Timeline

Published: 2023-06-01 00:00 UTC
Last Modified: 2023-06-01

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 9.8,
  "datePublished": "2023-06-01T00:00:00Z",
  "dateUpdated": "2023-06-01T00:00:00Z",
  "description": "Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or delete database elements.",
  "dueDate": "2023-06-23T00:00:00Z",
  "id": "CVE-2023-34362",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Known",
  "product": "MOVEit Transfer",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "CRITICAL",
  "source": "vulncheck_kev",
  "title": "Progress MOVEit Transfer SQL Injection Vulnerability",
  "vendor": "Progress"
}

cve-2023-34362

Raw JSON Data