VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026

CVE-2020-4435

CVE-2020-4435

Description

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180901.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21
  • IBM/Aspera Sharescpe-rescue
    Range: 3.7.4
  • IBM/Aspera High-Speed Transfercpe-rescue4 versions
    3.9.3+ 3 more
    • (no CPE)range: 3.9.3
    • cpe:2.3:a:ibm:aspera_high-speed_transfer_endpoint:*:*:*:*:*:*:*:*range: <=3.9.3
    • cpe:2.3:a:ibm:aspera_high-speed_transfer_server:*:*:*:*:*:*:*:*range: <=3.9.3
    • (no CPE)range: 3.9.3
  • IBM/Aspera Application Platform On Demand2 versions
    cpe:2.3:a:ibm:aspera_application_platform_on_demand:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_application_platform_on_demand:*:*:*:*:*:*:*:*range: <=3.7.4
    • (no CPE)range: 3.7.4
  • IBM/Aspera Faspex On Demand2 versions
    cpe:2.3:a:ibm:aspera_faspex_on_demand:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_faspex_on_demand:*:*:*:*:*:*:*:*range: <=3.7.4
    • (no CPE)range: 3.7.4
  • IBM/Aspera High Speed Transfer Server For Cloud Pak For Integration2 versions
    cpe:2.3:a:ibm:aspera_high-speed_transfer_server_for_cloud_pak_for_integration:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_high-speed_transfer_server_for_cloud_pak_for_integration:*:*:*:*:*:*:*:*range: <=3.9.10
    • (no CPE)range: 3.9.10
  • IBM/Aspera Proxy Server2 versions
    cpe:2.3:a:ibm:aspera_proxy_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_proxy_server:*:*:*:*:*:*:*:*range: <=1.4.3
    • (no CPE)range: 1.4.3
  • IBM/Aspera Server On Demand2 versions
    cpe:2.3:a:ibm:aspera_server_on_demand:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_server_on_demand:*:*:*:*:*:*:*:*range: <=3.7.4
    • (no CPE)range: 3.7.4
  • IBM/Aspera Shares On Demand
    cpe:2.3:a:ibm:aspera_shares_on_demand:*:*:*:*:*:*:*:*
    Range: <=3.7.4
  • IBM/Aspera Streaming2 versions
    cpe:2.3:a:ibm:aspera_streaming:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_streaming:*:*:*:*:*:*:*:*range: <=3.9.3
    • (no CPE)range: 3.9.3
  • IBM/Aspera Transfer Cluster Manager2 versions
    cpe:2.3:a:ibm:aspera_transfer_cluster_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:aspera_transfer_cluster_manager:*:*:*:*:*:*:*:*range: <=1.3.1
    • (no CPE)range: 1.3.1
  • IBM/Asperallm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.