Skip to content
Sign in
8.8 High

CVE-2020-4436 Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an…

Description

Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code through a service. IBM X-Force ID: 180902.

Affected products and versions

Product Affected versions Fixed in
Aspera Faspex On Demand 3.7.4 No fix stated
Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I) 3.9.10 No fix stated
Aspera High-Speed Transfer Endpoint 3.9.3 No fix stated
Aspera Streaming 3.9.3 No fix stated
Aspera Server On Demand 3.7.4 No fix stated
Aspera Shares On Demand 3.7.4 No fix stated
Aspera Application Platform On Demand 3.7.4 No fix stated
Aspera Transfer Cluster Manager 1.3.1 No fix stated
Aspera High-Speed Transfer Server 3.9.3 No fix stated
Show the other branch
Product Affected versions Fixed in
Aspera Proxy Server 1.4.3 No fix stated

Other CVEs of Aspera Faspex On Demand

The 5 CVEs of Aspera Faspex On Demand →
CVE-2020-4435 Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration,… 7.5 High CVE-2020-4433 Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking 7.5 High CVE-2020-4434 Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid… 7.5 High CVE-2020-4432 Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an… 7.5 High
Track this CVE