Zero-Day Vulnerability in MOVEit Transfer Exploited for Data Theft
mandiant.com · Undated · Licence: TRAM repository license; underlying reports not cleared for redistribution
CVEs this report names
1 CVE- CVE-2023-34362Progress MOVEit Transfer SQL Injection VulnerabilityProgress · MOVEit TransferKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+5 more · 2 reports99.9%Top 0.03%86.0priority
Where it names them
CVE-2023-34362 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
This vulnerability was announced by Progress Software Corporation on May 31, 2023 and has been assigned CVE-2023-34362.
the listed authors are dozens of consultants and analysts who have already been working to help our clients with cases related to exploitation of CVE-2023-34362.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.