CVE-2023-6218 (published 2023-11-29T16:14:17.324Z)

In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified.  It is possible for a group administrator to elevate a group members permissions to the role of an organization administrator.

Affected products: Vendor: Progress Software Corporation
Product: MOVEit Transfer
Versions: 2023.1.0(15.1.0), 2023.0.0 (15.0.0), 2022.1.0 (14.1.0), 2022.0.0 (14.0.0)