Aspera Console Vulnerable to SQL Injection

CVE-2022-43842

What is CVE-2022-43842?

The vulnerability in IBM Aspera Console versions 3.4.0 through 3.4.2 arises from improper handling of input, allowing a remote attacker to execute arbitrary SQL queries. By sending specially crafted SQL statements, an attacker may gain unauthorized access to the back-end database, leading to potential exposure and manipulation of sensitive data. This vulnerability highlights the importance of input validation and secure coding practices to protect against injection attacks.

References