Skip to content
Sign in
5.9 Medium

CVE-2023-22862 IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method…

Description

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected products and versions

Product Affected versions Fixed in
Aspera Connect 4.2.5 No fix stated
Aspera Cargo 4.2.5 No fix stated

Other CVEs of Aspera Connect

The 3 CVEs of Aspera Connect →
CVE-2023-27285 IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds… 8.4 High CVE-2020-4545 IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper… 7.8 High
Track this CVE