Information Disclosure Vulnerability in IBM Aspera Faspex by IBM
CVE-2023-37413

5.3MEDIUM

Key Information:

Vendor
IBM
Status
Aspera Faspex
Vendor
CVE Published:
29 January 2025

Summary

IBM Aspera Faspex version 5.0.0 through 5.0.10 is susceptible to a vulnerability that allows for the disclosure of sensitive username information. This issue arises from a detectable response discrepancy that attackers might exploit to gain unauthorized access to user credentials. Users of the affected versions should implement necessary patches to safeguard against potential breaches.

Affected Version(s)

Aspera Faspex 5.0.0 <= 5.0.10

References

https://www.ibm.com/support/pages/node/7181814

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.