Progress patches 15 WS_FTP flaws; worst steals admin credentials
Progress, the maker of MOVEit, disclosed 15 vulnerabilities in its WS_FTP file server. The worst, rated 10/10, lets attackers steal admin credentials without a login. Updates 2024.0.7 and 2025.0.4 fix the flaws; no attacks are known, but admins should update now, as hackers hit WS_FTP three days after its 2023 flaws went public.
What happened
Progress, the maker of MOVEit, disclosed 15 security flaws in its WS_FTP file transfer server. The worst, rated 10 out of 10, lets attackers steal administrator credentials without any login. Updates that fix the flaws are already available.
Why it matters
File transfer servers typically move sensitive data between companies. A breach can expose documents and credentials and halt operations that depend on those transfers. In 2023, hackers hit WS_FTP three days after similar flaws went public, according to the source.
What to do
Update WS_FTP Server to version 2024.0.7 or 2025.0.4 immediately. Check which WS_FTP servers are in use and monitor administrative access until the update is complete.
For the technical team
- Affected
- Progress WS_FTP Server · Progress WS_FTP Server; versions prior to the fixed 2024.0.7 and 2025.0.4.
- Exploitation
- No known attacks, per the source. Disclosure stage; no PoC cited.
- Fix
- Update to WS_FTP Server 2024.0.7 or 2025.0.4.
- Vector
- WS_FTP file server. The worst flaw, rated 10/10, allows theft of administrator credentials without requiring prior authentication.
- More details
- A total of 15 vulnerabilities were disclosed. Progress also makes MOVEit. The source notes that in 2023 hackers hit WS_FTP three days after its flaws went public. No specific CVEs were cited.
Timeline
Batch brings the disclosure of the 15 flaws and patched versions 2024.0.7 and 2025.0.4, with no known attacks.
Sources 1 source
- @IntCyberDigest @IntCyberDigest
