Shulou(Shulou.com)11/24 Report--

CTOnews.com June 6, MOVEit Transfer is a MFT file sharing system developed by Progress Company in the United States, which allows enterprises to transfer files safely. Microsoft tweeted a few days ago, warning users to pay attention to the zero-day vulnerability CVE-2023-34362 in MOVEit Transfer.

The ▲ image source Microsoft Threat IntelligenceCVE-2023-34362 vulnerability allows an unauthenticated attacker to read the MOVEit Transfer database, while depending on the type of MySQL, Microsoft SQL Server, or Azure SQL database used by the user, the attacker can infer the database structure and content and destroy the SQL statements in it.

According to Microsoft's investigation, the mastermind of this MOVEit Transfer vulnerability attack is most likely to be Lace Tempest, a hacker who previously operated the blackmail software and operated the Clop blackmail website. Lace Tempest has used similar vulnerabilities in the past to steal files and blackmail victims.

CTOnews.com notes that all current versions of MOVEit Transfer are affected by this vulnerability, and Progress has made some mitigation recommendations:

Users can deactivate all HTTP and HTTPs traffic in the MOVEit Transfer environment and modify firewall rules to deny HTTP and HTTPs traffic to MOVEit Transfer on ports 80 and 443 until the company issues a patch.

Progress officials also remind users to check and delete unauthorized accounts and check log records to see if there are unauthorized database access records.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.