In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified. It is possible for a group administrator to elevate a group members permissions to the role of an organization administrator.
| Software | From | Fixed in |
|---|---|---|
| progress / moveit_transfer | 2022.0.0 | 2022.0.9 |
| progress / moveit_transfer | - | 2021.1.0.x |
| progress / moveit_transfer | 2022.1.0 | 2022.1.10 |
| progress / moveit_transfer | 2023.0.0 | 2023.0.7 |
| progress / moveit_transfer | 2023.1.0 | 2023.1.2 |