This section outlines issues tracked and fixed by the MOVEit product team for the 2025.0.1 service pack.
Note: See the What's New section for a broader summary of features and improvements.

ID

Category

Fixed Issue
42836 Security, REST API Fixed REST API to ignore insecure HTTP Port 80. New behavior includes an HTTP Server error with an "Insecure Connection" message. (REST API connection requests require use of HTTPS over Port 443.)
84115 SFTP, password policy SFTP service allows client sessions within grace period after password expiration.
91120 Security, folders Resolved an issue where certain invalid folder operations could result in inconsistent error handling and logging.
91121 Security, files Resolved an issue where certain invalid file operations could result in inconsistent audit logging.
91141 WebUI, uploads Fixed folder error message for partial upload to align with other status messages.
91232 Security Fixed issue that elicited a false positive on scan results of web.config.
91675 HTTPS Fixed a logging issue for SHA-1 integrity checks when using MOVEit ISAPI.
91834 Java API Fixed authentication issue observed for case where SSH key was added by the Java API.
91857 Security Upgraded server-side Axios.js to latest stable version.
92029 SFTP, Config Utility MOVEit Transfer Config utility now shows SHA-1 and SHA-256 fingerprints for SSH host keys.
92376 API, time zone Fixed time zone conversion inconsistency in machine interface.
92643 OrgCopy Utility Fixed OrgCopy to back up older files stored with upload comments.