VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026

CVE-2020-4434

CVE-2020-4434

Description

Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180900.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21
  • IBM/Aspera Application Platform On Demand2 versions
    cpe:2.3:a:ibm:aspera_application_platform_on_demand:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_application_platform_on_demand:*:*:*:*:*:*:*:*range: <=3.7.4
    • (no CPE)range: 3.7.4
  • IBM/Aspera Faspex On Demand2 versions
    cpe:2.3:a:ibm:aspera_faspex_on_demand:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_faspex_on_demand:*:*:*:*:*:*:*:*range: <=3.7.4
    • (no CPE)range: 3.7.4
  • IBM/Aspera High-Speed Transfer4 versions
    cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:*:*:*:*:*:*:*:*range: <=3.9.3
    • cpe:2.3:a:ibm:aspera_high-speed_transfer_server:*:*:*:*:*:*:*:*range: <=3.9.3
    • (no CPE)range: 3.9.3
    • (no CPE)range: 3.9.3
  • IBM/Aspera High Speed Transfer Server For Cloud Pak For Integration2 versions
    cpe:2.3:a:ibm:aspera_high-speed_transfer_server_for_cloud_pak_for_integration:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_high-speed_transfer_server_for_cloud_pak_for_integration:*:*:*:*:*:*:*:*range: <=3.9.10
    • (no CPE)range: 3.9.10
  • IBM/Aspera Proxy Server2 versions
    cpe:2.3:a:ibm:aspera_proxy_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_proxy_server:*:*:*:*:*:*:*:*range: <=1.4.3
    • (no CPE)range: 1.4.3
  • IBM/Aspera Server On Demand2 versions
    cpe:2.3:a:ibm:aspera_server_on_demand:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_server_on_demand:*:*:*:*:*:*:*:*range: <=3.7.4
    • (no CPE)range: 3.7.4
  • IBM/Aspera Shares On Demand
    cpe:2.3:a:ibm:aspera_shares_on_demand:*:*:*:*:*:*:*:*
    Range: <=3.7.4
  • IBM/Aspera Streaming2 versions
    cpe:2.3:a:ibm:aspera_streaming:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_streaming:*:*:*:*:*:*:*:*range: <=3.9.3
    • (no CPE)range: 3.9.3
  • IBM/Aspera Transfer Cluster Manager2 versions
    cpe:2.3:a:ibm:aspera_transfer_cluster_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_transfer_cluster_manager:*:*:*:*:*:*:*:*range: <=1.3.1
    • (no CPE)range: 1.3.1
  • IBM/Asperallm-fuzzy
  • IBM/Aspera Sharescpe-rescue
    Range: 3.7.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.