CVE-2024-38316

Summary

CVE-2024-38316 is a vulnerability affecting IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6. This issue allows authenticated users to send emails at an uncontrolled rate, potentially leading to email flooding or a denial of service. The software fails to implement adequate email sending frequency limits. Organizations using IBM Aspera Shares should update to a non-vulnerable version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.