PT-2024-31715

CVE-2024-4563

·

Published

2024-05-22

·

Updated

2025-01-08

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Progress MOVEit Automation versions prior to 2024.0.1
Description: The issue concerns the use of a cryptographic method with insufficient bit length in the configuration export function. This affects versions prior to 2024.0.1.
Recommendations: For versions prior to 2024.0.1, upgrade to version 2024.0.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the configuration export function until the upgrade is applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾