Medium severity6.3NVD Advisory· Published Sep 16, 2024· Updated Jun 17, 2026
CVE-2024-38315
CVE-2024-38315
Description
IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:ibm:aspera_shares:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:ibm:aspera_shares:*:*:*:*:*:*:*:*range: >=1.0.0,<1.10.0
- cpe:2.3:a:ibm:aspera_shares:1.0:*:*:*:*:*:*:*range: 1.0
- cpe:2.3:a:ibm:aspera_shares:1.10.0:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:aspera_shares:1.10.0:patch_level1:*:*:*:*:*:*
- cpe:2.3:a:ibm:aspera_shares:1.10.0:patch_level2:*:*:*:*:*:*
- cpe:2.3:a:ibm:aspera_shares:1.10.0:patch_level3:*:*:*:*:*:*
- (no CPE)range: 1.0 - 1.10.0 PL3
Patches
Vulnerability mechanics
References
2- exchange.xforce.ibmcloud.com/vulnerabilities/294742nvdVDB EntryVendor Advisory
- www.ibm.com/support/pages/node/7168379nvdVendor Advisory
News mentions
0No linked articles in our index yet.