Progress’ MOVEit Transfer Critical Vulnerability | Grey Noise Blog
Summary: Progress issued a security notice on May 31, 2023, for a MOVEit Transfer vulnerability allowing escalated privileges and potential unauthorized access, assigned CVE-2023-34362 on June 2, 2023. GreyNoise observed scanning of the MOVEit Transfer login page at /human.aspx as early as March 3, 2023, and all 5 IPs it saw attempting to locate MOVEit installations were already marked "Malicious" for prior activity.
What's compelling: Progress told users to review for unauthorized access going back at least 30 days, but GreyNoise's scanning evidence predates that window by nearly three months and recommends reviewing at least 90 days - the webshell artifact to hunt for is human2.aspx.
Read the original at GreyNoise Blog ↗
- Topics
- Data Breaches
- Mentions
- CVE-2023-34362
- Related
- CVE-2023-34362: Progress MOVEit Transfer SQL Injection Vulnerability Known Exploited Vulnerabilities · Jun 02, 2023