CVE-2023-6218 (GCVE-0-2023-6218)

Vulnerability from cvelistv5 – Published: 2023-11-29 16:14 – Updated: 2024-08-02 08:21
VLAI?
Summary
In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified.  It is possible for a group administrator to elevate a group members permissions to the role of an organization administrator.
Severity ?
7.2 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-269 - Improper Privilege Management
Assigner
References
Impacted products
Vendor Product Version
Progress Software Corporation MOVEit Transfer Unaffected: 2023.1.0(15.1.0) , < 2023.1.1(15.1.1) (semver)
Affected: 2023.0.0 (15.0.0) , < 2023.0.7 (15.0.7) (semver)
Affected: 2022.1.0 (14.1.0) , < 2022.1.10 (14.1.10) (semver)
Affected: 2022.0.0 (14.0.0) , < 2022.0.9 (14.0.9) (semver)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:21:17.955Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "product",
              "x_transferred"
            ],
            "url": "https://www.progress.com/moveit"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-November-2023"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "modules": [
            "MOVEit Transfer Web Interface"
          ],
          "product": "MOVEit Transfer",
          "vendor": "Progress Software Corporation",
          "versions": [
            {
              "lessThan": "2023.1.1(15.1.1)",
              "status": "unaffected",
              "version": "2023.1.0(15.1.0)",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.0.7 (15.0.7)",
              "status": "affected",
              "version": "2023.0.0 (15.0.0)",
              "versionType": "semver"
            },
            {
              "lessThan": "2022.1.10 (14.1.10)",
              "status": "affected",
              "version": "2022.1.0 (14.1.0)",
              "versionType": "semver"
            },
            {
              "lessThan": "2022.0.9 (14.0.9)",
              "status": "affected",
              "version": "2022.0.0 (14.0.0)",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified.\u0026nbsp; It is possible for a group administrator to elevate a group members permissions to the role of an organization\u0026nbsp;administrator.\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u003cbr\u003e\u003c/span\u003e\u003c/span\u003e"
            }
          ],
          "value": "\nIn Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified.\u00a0 It is possible for a group administrator to elevate a group members permissions to the role of an organization\u00a0administrator.\n"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-1",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-29T16:14:17.324Z",
        "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
        "shortName": "ProgressSoftware"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://www.progress.com/moveit"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-November-2023"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "MOVEit Transfer Group Admin Privilege Escalation",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
    "assignerShortName": "ProgressSoftware",
    "cveId": "CVE-2023-6218",
    "datePublished": "2023-11-29T16:14:17.324Z",
    "dateReserved": "2023-11-20T17:22:11.765Z",
    "dateUpdated": "2024-08-02T08:21:17.955Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"2021.1.0\", \"matchCriteriaId\": \"9A99606D-C2F1-40F0-B682-8AF3A1214ED7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2022.0.0\", \"versionEndExcluding\": \"2022.0.9\", \"matchCriteriaId\": \"6985BD08-92E5-48EA-BB76-B85186F067EA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2022.1.0\", \"versionEndExcluding\": \"2022.1.10\", \"matchCriteriaId\": \"7753AA60-D5C5-47A7-AE71-0ED05DE24930\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2023.0.0\", \"versionEndExcluding\": \"2023.0.7\", \"matchCriteriaId\": \"A01A6CCA-73BC-45BE-858A-24EEA00B81EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2023.1.0\", \"versionEndExcluding\": \"2023.1.2\", \"matchCriteriaId\": \"7B7FB41C-AC16-4A5F-9C0D-CEF3E87084CF\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"\\nIn Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified.\\u00a0 It is possible for a group administrator to elevate a group members permissions to the role of an organization\\u00a0administrator.\\n\"}, {\"lang\": \"es\", \"value\": \"En las versiones de Progress MOVEit Transfer lanzadas antes de 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), se ha identificado una ruta de escalada de privilegios asociada con los administradores de grupo. Es posible que un administrador de grupo eleve los permisos de los miembros de un grupo al rol de administrador de la organizaci\\u00f3n.\"}]",
      "id": "CVE-2023-6218",
      "lastModified": "2024-11-21T08:43:23.390",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"security@progress.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.2, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 5.9}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.2, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 5.9}]}",
      "published": "2023-11-29T17:15:07.587",
      "references": "[{\"url\": \"https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-November-2023\", \"source\": \"security@progress.com\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://www.progress.com/moveit\", \"source\": \"security@progress.com\", \"tags\": [\"Product\"]}, {\"url\": \"https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-November-2023\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://www.progress.com/moveit\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Product\"]}]",
      "sourceIdentifier": "security@progress.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"security@progress.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-269\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-269\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-6218\",\"sourceIdentifier\":\"security@progress.com\",\"published\":\"2023-11-29T17:15:07.587\",\"lastModified\":\"2024-11-21T08:43:23.390\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"\\nIn Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified.\u00a0 It is possible for a group administrator to elevate a group members permissions to the role of an organization\u00a0administrator.\\n\"},{\"lang\":\"es\",\"value\":\"En las versiones de Progress MOVEit Transfer lanzadas antes de 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), se ha identificado una ruta de escalada de privilegios asociada con los administradores de grupo. Es posible que un administrador de grupo eleve los permisos de los miembros de un grupo al rol de administrador de la organizaci\u00f3n.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@progress.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.2,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.2,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"security@progress.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-269\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-269\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2021.1.0\",\"matchCriteriaId\":\"9A99606D-C2F1-40F0-B682-8AF3A1214ED7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2022.0.0\",\"versionEndExcluding\":\"2022.0.9\",\"matchCriteriaId\":\"6985BD08-92E5-48EA-BB76-B85186F067EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2022.1.0\",\"versionEndExcluding\":\"2022.1.10\",\"matchCriteriaId\":\"7753AA60-D5C5-47A7-AE71-0ED05DE24930\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2023.0.0\",\"versionEndExcluding\":\"2023.0.7\",\"matchCriteriaId\":\"A01A6CCA-73BC-45BE-858A-24EEA00B81EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2023.1.0\",\"versionEndExcluding\":\"2023.1.2\",\"matchCriteriaId\":\"7B7FB41C-AC16-4A5F-9C0D-CEF3E87084CF\"}]}]}],\"references\":[{\"url\":\"https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-November-2023\",\"source\":\"security@progress.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://www.progress.com/moveit\",\"source\":\"security@progress.com\",\"tags\":[\"Product\"]},{\"url\":\"https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-November-2023\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://www.progress.com/moveit\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Product\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.