This section outlines issues tracked and fixed by the MOVEit product team for the 2023.0.4 service pack.

ID

Category

Fixed Issue
68501 Installer Upgrades and repairs slow when certificate storage has large number of certs.
69752 Server/Security Improved controls and validation for active sessions.
69753 Server/Security Improved controls and validation for upload states.
69990 Server/REST API Improved availability issue that could occur with increased volume and scale out of session sign-on activity.
69998 Server Improved transaction server parsing.
70001 Server/Security Newer password hashing scheme enforced. Legacy scheme is no longer supported.
70167 Server Refactoring and abstraction of OrgEngine/InstCertAdd.
70176 Server/Security Addressed a SQL injection vulnerability that may allow an authorized user to gain unauthorized access to MOVEit Transfer's database.
70312 Server/Security Addressed a SQL injection vulnerability that may allow an authorized user to gain unauthorized access to MOVEit Transfer's database.
70404 Server/User Auth Addressed a SQL injection vulnerability that may allow an attacker to gain unauthorized access to MOVEit Transfer's database.