Weak Cryptographic Algorithms in IBM Aspera Console
CVE-2022-43851

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Aspera Console
Vendor
CVE Published:
14 April 2025

Summary

IBM Aspera Console versions 3.4.0 through 3.4.4 utilize cryptographic algorithms that are weaker than necessary, potentially allowing unauthorized individuals to decrypt sensitive information and compromise data security.

Affected Version(s)

Aspera Console 3.4.0 <= 3.4.4

References

https://www.ibm.com/support/pages/node/7169766
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.