CVE-2025-23244

Published May 1, 2025

Last updated 6 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-23244 affects Progress MOVEit Transfer (SFTP module). It involves an Improper Privilege Management vulnerability. Specifically, users configured as Shared Accounts are susceptible to Privilege Escalation. The issue impacts MOVEit Transfer versions from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, and from 2024.1.0 before 2024.1.2. Additionally, CVE-2025-23244 has been identified in the NVIDIA GPU Display Driver for Linux. This vulnerability could allow an unprivileged attacker to escalate permissions, potentially leading to code execution, denial of service, information disclosure, and data tampering.

Description: NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Source: psirt@nvidia.com
NVD status: Deferred

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

psirt@nvidia.com: CWE-863

Hype score: Not currently trending

References