CVE-2024-7209

Description

A vulnerability exists in the use of shared SPF records in multi-tenant hosting providers, allowing attackers to use network authorization to be abused to spoof the email identify of the sender.

Reserved 2024-07-29 | Published 2024-07-30 | Updated 2025-02-13 | Assigner certcc

Problem types

CWE-290 Authentication Bypass by Spoofing

Product status

Current
affected

Current
affected

References

kb.cert.org/vuls/id/244112

www.kb.cert.org/vuls/id/244112

cve.org (CVE-2024-7209)

nvd.nist.gov (CVE-2024-7209)

Download JSON