Progress MOVEit Automation Authentication Bypass RCE | MSSP Advisory

Progress Software disclosed a critical authentication bypass vulnerability (CVE-2024-7954) in MOVEit Automation that allows unauthenticated attackers to create admin accounts with full system access. The flaw affects MOVEit Automation versions 2023.0.0 through 2024.1.0 and requires no user interaction to exploit. Progress released patches for all affected versions and confirmed no evidence of active exploitation.

MOVEit products are prime targets for ransomware groups who understand that compromising one file transfer system gives access to data flowing between multiple organizations. Your clients running MOVEit Automation face immediate risk of complete system compromise through admin account creation, and you need documented proof you warned them before attackers start exploiting this bypass.