CVE-2023-37412 IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access…

Description

IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access controls.

Affected products and versions

Product	Affected versions	Fixed in
Aspera Faspex 5.0	5.0.0 → 5.0.10	No fix stated

Other CVEs of Aspera Faspex

The 41 CVEs of Aspera Faspex →

CVE-2025-36171 IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly… 4.9 Medium CVE-2025-36225 IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user… 4.3 Medium CVE-2023-37401 IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be… 5.3 Medium CVE-2025-36040 IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to… 6.5 Medium