VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026

CVE-2020-4434

CVE-2020-4434

Description

Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180900.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21
  • IBM/Aspera Application Platform On Demand
    cpe:2.3:a:ibm:aspera_application_platform_on_demand:*:*:*:*:*:*:*:*
    Range: <=3.7.4
  • IBM/Aspera Faspex On Demand
    cpe:2.3:a:ibm:aspera_faspex_on_demand:*:*:*:*:*:*:*:*
    Range: <=3.7.4
  • IBM/Aspera High-Speed Transfer4 versions
    cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:*:*:*:*:*:*:*:*range: <=3.9.3
    • cpe:2.3:a:ibm:aspera_high-speed_transfer_server:*:*:*:*:*:*:*:*range: <=3.9.3
    • (no CPE)range: 3.9.3
    • (no CPE)range: 3.9.3
  • IBM/Aspera High Speed Transfer Server For Cloud Pak For Integration
    cpe:2.3:a:ibm:aspera_high-speed_transfer_server_for_cloud_pak_for_integration:*:*:*:*:*:*:*:*
    Range: <=3.9.10
  • IBM/Aspera Proxy Server
    cpe:2.3:a:ibm:aspera_proxy_server:*:*:*:*:*:*:*:*
    Range: <=1.4.3
  • IBM/Aspera Server On Demand
    cpe:2.3:a:ibm:aspera_server_on_demand:*:*:*:*:*:*:*:*
    Range: <=3.7.4
  • IBM/Aspera Shares On Demand
    cpe:2.3:a:ibm:aspera_shares_on_demand:*:*:*:*:*:*:*:*
    Range: <=3.7.4
  • IBM/Aspera Streaming
    cpe:2.3:a:ibm:aspera_streaming:*:*:*:*:*:*:*:*
    Range: <=3.9.3
  • IBM/Aspera Transfer Cluster Manager
    cpe:2.3:a:ibm:aspera_transfer_cluster_manager:*:*:*:*:*:*:*:*
    Range: <=1.3.1
  • IBM/Asperallm-fuzzy
  • IBM/Aspera Application Platform On Demandv5
    Range: 3.7.4
  • IBM/Aspera Faspex On Demandv5
    Range: 3.7.4
  • IBM/Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)v5
    Range: 3.9.10
  • IBM/Aspera Proxy Serverv5
    Range: 1.4.3
  • IBM/Aspera Server On Demandv5
    Range: 3.7.4
  • IBM/Aspera Sharescpe-rescue
    Range: 3.7.4
  • IBM/Aspera Streamingv5
    Range: 3.9.3
  • IBM/Aspera Transfer Cluster Managerv5
    Range: 1.3.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.