PT-2024-31715
CVE-2024-4563
·
Published
2024-05-22
·
Updated
2025-01-08
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Progress MOVEit Automation versions prior to 2024.0.1
Description:
The issue concerns the use of a cryptographic method with insufficient bit length in the configuration export function. This affects versions prior to 2024.0.1.
Recommendations:
For versions prior to 2024.0.1, upgrade to version 2024.0.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the configuration export function until the upgrade is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾