5.3
Medium
CVE-2022-43852 IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in…
Description
IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aspera Console 3.4 | 3.4.0 → 3.4.4 | No fix stated |
Other CVEs of Aspera Console
The 18 CVEs of Aspera Console →
CVE-2025-13212
IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email…
5.3
Medium
CVE-2025-13459
IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper…
2.7
Low
CVE-2025-13460
IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response…
5.3
Medium
CVE-2025-13379
IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection
8.6
High