VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 4, 2023· Updated Jan 8, 2025

IBM Aspera information disclosure

CVE-2023-22862

Description

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Aspera Cargollm-fuzzy2 versions
    =4.2.5+ 1 more
    • (no CPE)range: =4.2.5
    • (no CPE)range: 4.2.5
  • IBM/Aspera Connectllm-fuzzy2 versions
    =4.2.5+ 1 more
    • (no CPE)range: =4.2.5
    • (no CPE)range: 4.2.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.