CVE-2024-4563

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-4563
The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://community.progress.com/s/article/MOVEit-Automation-Vulnerability-CVE-2024-4563-May-22-2024
https://www.progress.com/moveit
Configurations

No configuration.

History

23 May 2024, 16:15

Type Values Removed Values Added
Summary (en) The Progress MOVEit Automation configuration export function prior to 2024.0.1 uses a cryptographic method with insufficient bit length. (en) The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length.

22 May 2024, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-22 17:16

Updated : 2024-05-23 16:15

NVD link : CVE-2024-4563

Mitre link : CVE-2024-4563

CVE.ORG link : CVE-2024-4563

JSON object : View

Products Affected

No product.

CWE
CWE-327

Use of a Broken or Risky Cryptographic Algorithm