Critical · 9.1 CVE-2024-5805 EUVD-2024-46953GHSA-x26p-7jm2-gmg9

MOVEit Gateway Authentication Bypass Vulnerability

Published Jun 25, 2024 · Updated Nov 4, 2026 · Assigned by ProgressSoftware

Vendor: Progress Software Product: MOVEit Gateway

Description

Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.

Affected products

Vendor	Product	Affected	Fixed
Progress	MOVEit Gateway	2024.0.0 – < 2024.0.1	2024.0.1

Advisories 2

NCSC-2024-0267 Kwetsbaarheden verholpen in Progress MOVEit NCSC-NL (Netherlands) · Jun 26, 2024
WID-SEC-2024-1457 Progress Software MOVEit: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jun 25, 2024

References

https://www.progress.com/moveit product
https://community.progress.com/s/article/MOVEit-Gateway-Critical-Security-Alert-Bulletin-June-2024-CVE-2024-5805 vendor-advisory

CNA	v3.1	9.1
EUVD	v3.1	9.1