Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: IBM Aspera Orchestrator — ibm.com/support/pages/node/7161538 Clear all filters
TI-2023-11448 CVE-2023-26288 · GHSA-p38c-8pg2-fqx5

IBM Aspera Orchestrator session fixation

Priority LOW 24

IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00226 Published 2024-07-30 No fix listed CWE-613
TI-2023-19433 CVE-2023-38001 · GHSA-p3rw-8f54-fjgc

IBM Aspera Orchestrator cross-site request forgery

Priority LOW 28

IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00257 Published 2024-07-30 No fix listed CWE-352