CVE-2024-4563— The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length
Quick assessment
Affected
Progress Software Corporation MOVEit Automation
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Progress Software Progress MOVEit Automation是美国Progress Software公司的一套托管文件传输软件。该软件支持敏感数据传输和工作流程自动化等功能。 Progress Software Progress MOVEit Automation存在安全漏洞，该漏洞源于配置导出功能使用长度不足的加密方法，可能导致易于被破解。
Possible ATT&CK Techniques 1 AI
T1611 · Escape to Host
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-4563
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length
Source: CVE Program / CVE List V5
Vulnerability Description
The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用已被攻破或存在风险的密码学算法
Source: CVE Program / CVE List V5
Vulnerability Title
Progress Software Progress MOVEit Automation 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Progress Software Progress MOVEit Automation是美国Progress Software公司的一套托管文件传输软件。该软件支持敏感数据传输和工作流程自动化等功能。 Progress Software Progress MOVEit Automation存在安全漏洞，该漏洞源于配置导出功能使用长度不足的加密方法，可能导致易于被破解。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Progress Software Corporation | MOVEit Automation | 2024.0.0 ~ 2024.0.* | - |
|
II. Public POCs for CVE-2024-4563
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-4563
请登录查看更多情报信息。
Vendor Pages for CVE-2024-4563 (1)
Other References for CVE-2024-4563 (1)
IV. Related Vulnerabilities
Same product: MOVEit Automation
-
CVE-2026-8488
Allocation of resources without limits or throttling vulnera -
CVE-2026-8487
Incorrect default permissions vulnerability in Progress Soft -
CVE-2026-8486
Allocation of resources without limits or throttling vulnera -
CVE-2026-8485
Uncontrolled Memory Allocation vulnerability in Progress Sof -
CVE-2026-5174
Improper Access Control Vulnerability in Progress MOVEit Aut
Same vendor: Progress Software Corporation
-
CVE-2026-65941
WhatsUp Gold versions prior to 26.0.2 contain an unauthentic -
CVE-2026-65940
WhatsUp Gold versions prior to 26.0.2 excessive file system -
CVE-2026-65939
WhatsUp Gold versions prior to 26.0.2 contain an arbitrary f -
CVE-2026-65938
WhatsUp Gold versions prior to 26.0.2 contain an improper au -
CVE-2026-65937
WhatsUp Gold versions prior to 26.0.2 contain multiple store
Same weakness: CWE-327
-
CVE-2026-102824
Russh: Missing X25519 zero-point validation in hybrid ML-KEM -
CVE-2026-18104
IBM Db2 Mirror for i is vulnerable to obtain sensitive infor -
CVE-2026-18153
IBM Financial Transaction Manager (FTM) is Impacted by Multi -
CVE-2025-36084
Multiple Vulnerabilities in IBM Concert Software -
CVE-2026-54147
http4k: `DigestAuthProvider.verify` ignored configured algor
V. Comments for CVE-2024-4563
No comments yet