Vulnerabilities

TI-2022-19373 CVE-2022-40745 · GHSA-2wrh-3gmh-mgcw

IBM Aspera Faspex information disclosure

LOW 24

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00137 Published 2024-04-19 No fix listed CWE-326

TI-2023-19018 CVE-2023-37397 · GHSA-hhfx-wj9x-f5m6

LOW 19

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00078 Published 2024-04-19 No fix listed CWE-326

TI-2023-12023 CVE-2023-27279 · GHSA-4w8x-p5gf-gh2h

LOW 30

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00709 Published 2024-04-19 No fix listed CWE-799

TI-2023-19017 CVE-2023-37396 · GHSA-xr37-jcv5-cqxv

LOW 23

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00079 Published 2024-04-19 No fix listed CWE-327

TI-2023-09017 CVE-2023-22869 · GHSA-7m35-9cg4-vcm2

LOW 24

IBM Aspera Faspex 5.0.0 through 5.0.7 stores potentially sensitive information in log files that could be read by a local user.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0019 Published 2024-04-19 No fix listed CWE-532