Progress MOVEit Automation Authentication Bypass | MSSP Advisory

Progress Software patched two security flaws in MOVEit Automation including a critical authentication bypass vulnerability. MOVEit Automation is a server-based managed file transfer solution used to schedule and automate enterprise file movement workflows. The authentication bypass flaw could allow attackers to gain unauthorized access to the MFT system without valid credentials.

If your stack includes MOVEit Automation for client file transfers or backup workflows, an authentication bypass puts your entire operation at risk of breach and regulatory exposure. Your clients running MOVEit Automation face immediate compromise of their file transfer infrastructure, and you have a contractual obligation to notify them about this critical patch within hours of availability.