# MA-1087.072024: MyCERT Advisory - Progress Software Releases Security Bulletin for MOVEit Transfer

**Date:** 02 Jul 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1087.072024  
**Advisory ID:** MA-1087.072024

---

**1.0 Introduction**
Recently, Progress Software identified and patched a vulnerability (CVE-2024-5806) in their MOVEit product which is a widely used managed file transfer (MFT) software.
**2.0 Impact**
This vulnerability allowed attackers to bypass authentication and potentially gain access to the systems.
**3.0 Affected Products**
- **MOVEit Transfer SFTP** - CVE-2024-5806: CVSS Score:9.1 Critical- This high-risk vulnerability resides in the MOVEit Transfer SFTP service itself. In certain configurations, it could also lead to authentication bypass. This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.
**4.0 RecommendationsNOTICE: All MOVEit Transfer customers must take action and apply the patch to address the June 2024 vulnerability discovered in MOVEit Transfer**. 
CyberSecurity Malaysia urges users and organizations to review the MOVEit Transfer Advisory, follow the mitigation steps, apply the necessary updates, and hunt for any malicious activity.
Kindly refer to the following URL:
- <https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-June-2024-CVE-2024-5806>
Generally, we advise users of this device to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999 through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17.30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**6.0    References**
- <https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-June-2024-CVE-2024-5806>