Sploitus

CVE-2024-5806

5 known exploits for CVE-2024-5806

Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.

Affected products
Moveit Transfer
Progress Moveit Transfer
< 2023.0.11, 2023.1.6, 2024.0.0
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
81.5% (100th percentile)
Weakness
CWE-287
NVD status
Analyzed
Published
2024-06-25
Attack patterns
CAPEC-115
CVE-2024-5806 at NVD
Authoritative description, scoring and affected products

5 known exploits for CVE-2024-5806

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2024-5806
2026-09-05 KitPloitKITPLOIT
watchTowr-vs-progress-moveit_CVE-2024-5806
2026-09-02 KitPloitKITPLOIT
Progress MOVEit SFTP Authentication Bypass for Arbitrary File Read
2024-08-31 sfewer-r7, metasploit.comPACKETSTORMRuby
Progress MOVEit SFTP Authentication Bypass for Arbitrary File Read
2024-06-25 sfewer-r7METASPLOITRuby
Exploit for Improper Authentication in Progress Moveit_Transfer
2024-06-24 watchtowrlabsGITHUB