Skip to content
Sign in
5.9 Medium

CVE-2022-22405 IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly…

Description

IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 222576.

Affected products and versions

Product Affected versions Fixed in
Aspera Faspex 5.0.5 No fix stated

Other CVEs of Aspera Faspex

The 41 CVEs of Aspera Faspex →
CVE-2025-36171 IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly… 4.9 Medium CVE-2025-36225 IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user… 4.3 Medium CVE-2023-37401 IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be… 5.3 Medium CVE-2025-36040 IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to… 6.5 Medium
Track this CVE