PT-2024-39483 · Unknown · Clibo Manager

David Padilla Alvarado · Published 2024-09-26 · Updated 2024-10-02 · CVE-2024-9199

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Clibo Manager version 1.1.9.2

Description The issue is related to a rate limit vulnerability that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service (DoS).

Recommendations For Clibo Manager version 1.1.9.2, consider implementing additional rate limiting measures or temporarily restricting email sending capabilities to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-799

Related Identifiers

CVE-2024-9199

Affected Products

Clibo Manager

References · 6

• https://osv.dev/vulnerability/CVE-2024-9199 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9199 · Security Note
• https://twitter.com/VulmonFeeds/status/1839295519903842782 · Twitter Post
• https://t.me/cvedetector/6397 · Telegram Post
• https://twitter.com/CVEnew/status/1839247963031253069 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-clibo-manager · Note