Descripción
Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload and download vulnerability that can lead to remote code execution with elevated privileges.
Acción recomendada
Aplicar las mitigaciones del fabricante; si no están disponibles, discontinuar el uso del producto.
Referencias
- Aviso de support.cleo.com support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Securi…
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2024-50623
Otras vulnerabilidades de Cleo en el catálogo
- CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability Alta 17-12-2024