Jeff Hall - PCIGuru :verified: on Nostr: The new bug (CVE-2024-5806, CVSS: 7.4) is an improper authentication vulnerability in ...

The new bug (CVE-2024-5806, CVSS: 7.4) is an improper authentication vulnerability in MOVEit's SFTP module that "can lead to authentication bypass in limited scenarios," according to Progress. https://www.darkreading.com/remote-workforce/fresh-moveit-bug-under-attack-disclosure