Weaker than expected security in Aspera Faspex 5.0.0-5.0.7 could lead to sensitive information disclosure

CVE-2022-40745

What is CVE-2022-40745?

IBM Aspera Faspex versions 5.0.0 through 5.0.7 contain a significant vulnerability that allows local users to access sensitive information due to insufficient security controls. This issue poses potential risks for data confidentiality and system integrity, enabling unauthorized users to exploit weaker security measures. Organizations using these versions should take proactive steps to mitigate the risks associated with this vulnerability.

References