Skip to content
Sign in
7.5 High

CVE-2020-4432 Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an…

Description

Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. IBM X-Force ID: 180810.

Affected products and versions

Product Affected versions Fixed in
Aspera Streaming 3.9.3 No fix stated
Aspera High-Speed Transfer Endpoint 3.9.3 No fix stated
Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I) 3.9.10 No fix stated
Aspera Server On Demand 3.7.4 No fix stated
Aspera Faspex On Demand 3.7.4 No fix stated
Aspera Proxy Server 1.4.3 No fix stated
Aspera Application Platform On Demand 3.7.4 No fix stated
Aspera Shares On Demand 3.7.4 No fix stated
Aspera High-Speed Transfer Server 3.9.3 No fix stated
Show the other branch
Product Affected versions Fixed in
Aspera Transfer Cluster Manager 1.3.1 No fix stated

Other CVEs of Aspera Streaming

The 5 CVEs of Aspera Streaming →
CVE-2020-4435 Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration,… 7.5 High CVE-2020-4436 Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an… 8.8 High CVE-2020-4433 Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking 7.5 High CVE-2020-4434 Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid… 7.5 High
Track this CVE