High severity7.2NVD Advisory· Published Nov 29, 2023· Updated Jun 17, 2026
CVE-2023-6218
CVE-2023-6218
Description
In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified. It is possible for a group administrator to elevate a group members permissions to the role of an organization administrator.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<2022.0.9, <2022.1.10, <2023.0.7+ 2 more
- (no CPE)range: <2022.0.9, <2022.1.10, <2023.0.7
- cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*range: <=2021.1.0
- (no CPE)range: 2023.0.0 (15.0.0)
Patches
Vulnerability mechanics
References
2- community.progress.com/s/article/MOVEit-Transfer-Service-Pack-November-2023nvdRelease NotesVendor Advisory
- www.progress.com/moveitnvdProduct
News mentions
0No linked articles in our index yet.