What is CVE-2023-6218?

CVE-2023-6218 is a high-severity vulnerability in Progress Moveit_transfer, classified under Improper Privilege Management. CVSS score: 7.2/10. Published 2023-11-29.

How severe is CVE-2023-6218?

High severity. CVSS v3 base score is 7.2 out of 10.

Privilege escalation in Progress Moveit_transfer

CVE-2023-6218

In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified. It is possible for a group administrato…

Vulnerability class: Privilege Escalation

EPSS: 0.007 (49.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Progress Moveit_transfer
Progress Software Corporation Moveit Transfer — versions 2023.1.0(15.1.0), 2023.0.0 (15.0.0), 2022.1.0 (14.1.0)

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

security@progress.com (Product, product)
security@progress.com (vendor-advisory, Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2023-6218?: CVE-2023-6218 is a high-severity vulnerability in Progress Moveit_transfer, classified under Improper Privilege Management. CVSS score: 7.2/10. Published 2023-11-29.
How severe is CVE-2023-6218?: High severity. CVSS v3 base score is 7.2 out of 10.