{"id":8722,"date":"2023-07-20T17:33:44","date_gmt":"2023-07-20T14:33:44","guid":{"rendered":"https:\/\/oberig-it.com\/uncategorized\/the-moveit-zero-day-vulnerability-and-the-importance-of-cross-domain-solutions-in-data-transfer\/"},"modified":"2023-07-27T17:34:28","modified_gmt":"2023-07-27T14:34:28","slug":"the-moveit-zero-day-vulnerability-and-the-importance-of-cross-domain-solutions-in-data-transfer","status":"publish","type":"post","link":"https:\/\/oberig-it.com\/en\/articles\/the-moveit-zero-day-vulnerability-and-the-importance-of-cross-domain-solutions-in-data-transfer\/","title":{"rendered":"The MOVEit Zero-Day Vulnerability and the Importance of Cross Domain Solutions in Data Transfer"},"content":{"rendered":"

There has been much discussion around the recently discovered MOVEit zero-day vulnerability<\/span><\/a>, which is a Managed File Transfer solution that is deployed widely across Critical infrastructure providers, US government and commercial enterprises.
\nOne of the main problems is simply having an internet-facing Managed File Transfer solution. It is still early days, but it looks like the exploit uses an SQL injection vulnerability<\/span><\/a> in the internet facing half of the software.<\/p>\n

This then allows the attacker to gain a foothold where they can then gain persistence using webshell code that allows for a command and control infrastructure to be set up. This allows the attacker to then do the following on the server:<\/p>\n