cleo
Safeguard articles tagged "cleo" — guides, analysis, and best practices for software supply chain and application security.
4 articles
CVE-2024-50623: Cleo Multiple Products Unrestricted File Upload Vulnerability
CVE-2024-50623 affects Cleo Multiple Products and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-12-13.
CVE-2024-55956: Cleo Multiple Products Unauthenticated File Upload Vulnerability
CVE-2024-55956 affects Cleo Multiple Products and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-12-17.
Cleo MFT CVE-2024-50623 Supply Chain Postmortem
Cleo's managed file transfer products became the next MOVEit. A postmortem on CVE-2024-50623, the Cl0p exploitation, and the file-transfer software risk class.
CVE-2024-55956 Cleo Harmony/VLTrader RCE
Cleo's Harmony, VLTrader, and LexiCom carried an unauthenticated RCE that Clop abused for mass data theft. Here is the technical breakdown and the defender's takeaway.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.