Skip to content
Sign in
7.5 High

CVE-2020-4435 Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration,…

Description

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180901.

Affected products and versions

Product Affected versions Fixed in
Aspera Transfer Cluster Manager 1.3.1 No fix stated
Aspera High-Speed Transfer Server 3.9.3 No fix stated
Aspera Shares On Demand 3.7.4 No fix stated
Aspera Application Platform On Demand 3.7.4 No fix stated
Aspera Proxy Server 1.4.3 No fix stated
Aspera Faspex On Demand 3.7.4 No fix stated
Aspera Server On Demand 3.7.4 No fix stated
Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I) 3.9.10 No fix stated
Aspera Streaming 3.9.3 No fix stated
Show the other branch
Product Affected versions Fixed in
Aspera High-Speed Transfer Endpoint 3.9.3 No fix stated

Other CVEs of Aspera Transfer Cluster Manager

The 5 CVEs of Aspera Transfer Cluster Manager →
CVE-2020-4436 Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an… 8.8 High CVE-2020-4433 Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking 7.5 High CVE-2020-4434 Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid… 7.5 High CVE-2020-4432 Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an… 7.5 High
Track this CVE