PT-2024-38170 · Bird+1 · Fastmail+1

Caleb Sargent + 1 · Published 2024-07-30 · Updated 2024-11-05 · CVE-2024-7209

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description A vulnerability exists in the use of shared SPF records in multi-tenant hosting providers, allowing attackers to use network authorization to be abused to spoof the email identity of the sender.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-7209

Affected Products

Fastmail

Netwin

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-7209 · Security Note
• https://t.me/cvenotify/88059 · Telegram Post
• https://kb.cert.org/vuls/id/244112 · Note
• https://t.me/cvedetector/2047 · Telegram Post
• https://t.me/cvenotify/87947 · Telegram Post