Cleo VLTrader < 5.8.0.24 Unauthenticated Arbitrary Command Execution (CVE-2024-55956)

The version of Cleo VLTrader running on the remote host is prior to 5.8.0.24. It is, therefore, affected by an unauthenticated arbitrary command execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

PT-2024-10294

Name of the Vulnerable Software and Affected Versions Cleo Harmony versions prior to 5.8.0.23 Cleo VLTrader versions prior to 5.8.0.23 Cleo LexiCom versions prior to 5.8.0.23 Description An unrestricted file upload and download issue exists in multiple Cleo file transfer products. This flaw allow...