IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7001053 | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/244107 | |
| https://www.ibm.com/support/pages/node/7001053 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:45
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | () https://www.ibm.com/support/pages/node/7001053 - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.9 |
27 Sep 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-523 | |
| Summary | (en) IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. | |
| References |
|
09 Jun 2023, 22:54
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-522 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Ibm
Ibm aspera Cargo Ibm aspera Connect |
|
| CPE | cpe:2.3:a:ibm:aspera_cargo:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:aspera_connect:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.ibm.com/support/pages/node/7001053 - Patch, Vendor Advisory | |
| References | (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/244107 - VDB Entry, Vendor Advisory |
05 Jun 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-05 00:15
Updated : 2024-11-21 07:45
NVD link : CVE-2023-22862
Mitre link : CVE-2023-22862
CVE.ORG link : CVE-2023-22862
JSON object : View
Products Affected
ibm
- aspera_cargo
- aspera_connect