Progress MOVEit Transfer
Moderate fix4 remedies
cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*
Moderate fix4 remedies
- >= 2023.1.0, < 2023.1.3
- >= 2023.0.0, < 2023.0.8
- >= 2022.1.0, < 2022.1.11
- >= 2022.0.0, < 2022.0.10
Progress MOVEit Transfer Unverified Password Change Vulnerability in REST API Modules
Vulnerability
Patched
A vulnerability allowing unverified password changes has been identified in Progress MOVEit Transfer on Windows, specifically within the REST API modules. This issue affects MOVEit Transfer versions 2023.1.0 prior to 2023.1.3, 2023.0.0 prior to 2023.0.8, 2022.1.0 prior to 2022.1.11, and 2022.0.0 prior to 2022.0.10.
Impact
The vulnerability allows users to change passwords without prior verification, potentially leading to unauthorized access or account compromise.
Remediation
Users can upgrade to MOVEit Transfer version 2023.1.3 or later to address this vulnerability.
Added: Jan 7, 2026, 5:24 PM
Updated: Jan 7, 2026, 5:24 PM
Vulnerability Rating
Custom Algorithm
spread
5.2impact
2.5exploitability
5.4remediation
7.7relevance
1.9threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.