5.3
Medium
CVE-2024-56473 IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log…
Description
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aspera Shares 1.9 | 1.9.0 → latest | No fix stated |
Other CVEs of Aspera Shares
The 17 CVEs of Aspera Shares →
CVE-2025-66487
IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send…
2.7
Low
CVE-2025-66486
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection
4.8
Medium
CVE-2025-66485
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…
5.4
Medium
CVE-2025-66484
IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting
5.5
Medium