This section outlines issues tracked and fixed by the MOVEit product team for the 2022.1.8 Service Pack 1 release.

ID

Category

Fixed Issue
68501 Installer Installer upgrades and repair mode slow if certificate storage has large number of certs.
69752 Server/Security Improved controls and validation for active sessions.
69753 Server/Security Improved controls and validation for upload states.
69990 Server/REST API Improved availability issue that could occur with increased volume and scale out of session sign-on activity.
69998 Server Improved transaction server parsing.
70001 Server/Security Newer password hashing scheme enforced. Legacy scheme is no longer supported.
70167 Server Refactoring and abstraction of OrgEngine/InstCertAdd.
70176 Server/Security Addressed a SQL injection vulnerability that may allow an authorized user to gain unauthorized access to MOVEit Transfer's database.
70312 Server/Security Addressed a SQL injection vulnerability that may allow an authorized user to gain unauthorized access to MOVEit Transfer's database.
70404 Server/User Auth Addressed a SQL injection vulnerability that may allow an attacker to gain unauthorized access to MOVEit Transfer's database.