5.9
Medium
CVE-2023-37398 IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which…
Description
IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aspera Faspex 5.0 | 5.0.0 → 5.0.10 | No fix stated |
Other CVEs of Aspera Faspex
The 42 CVEs of Aspera Faspex →
CVE-2026-123218
IBM Aspera Faspex Authorization Bypass
9.8
Critical
CVE-2025-36171
IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly…
4.9
Medium
CVE-2025-36225
IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user…
4.3
Medium
CVE-2023-37401
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be…
5.3
Medium