CVE-2024-5805

published 2024-06-25

CVE-2024-5805: Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.

Priority P2 66 critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
progress	moveit_gateway	—	—
progress	moveit_gateway	>= 2024.0.0 < 2024.0.1	2024.0.1

Detection & IOCs extracted from sources · hover to see the quote

• → Check Point IPS signature available for related MOVEit Transfer Authentication Bypass vulnerability (CVE-2024-5806), which was disclosed alongside CVE-2024-5805 and shares the same attack surface (MOVEit SFTP modules) ↗

• · CVE-2024-5805 affects only MOVEit Gateway version 2024.0.0 (SFTP module); scope is limited to this single version ↗
• · A public proof-of-concept (PoC) exploit exists for the closely related CVE-2024-5806 (MOVEit Transfer SFTP Authentication Bypass), which was disclosed at the same time as CVE-2024-5805; defenders should treat exploitation risk as elevated ↗
• · Both CVE-2024-5805 and CVE-2024-5806 affect the SFTP service/feature and could allow unauthorized access and potential credential theft; vendor patches are available and urgently recommended ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-287