Weak Password Policy in IBM Aspera Faspex Affects User Account Security
CVE-2023-35907

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Aspera Faspex
Vendor
CVE Published:
29 January 2025

Summary

IBM Aspera Faspex versions 5.0.0 to 5.0.10 are impacted by a vulnerability that stems from a default configuration allowing weak password requirements. This oversight enables attackers to exploit user accounts more easily, posing significant risks to account security and integrity. Organizations using these versions should assess their configurations and implement strong password policies to safeguard their systems.

Affected Version(s)

Aspera Faspex 5.0.0 <= 5.0.10

References

https://www.ibm.com/support/pages/node/7181814

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.