CVE-2024-2291

Summary

CVE-2024-2291 is a logging bypass vulnerability affecting MOVEit Transfer versions prior to 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), and 2023.1.4 (15.1.4). An authenticated user can manipulate requests to bypass the logging mechanism within the web application, resulting in user activity failing to be logged properly. This vulnerability could potentially conceal unauthorized actions. Users are urged to update their MOVEit Transfer installations to the latest version as soon as possible to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.