CVE-2023-27285

Name of the Vulnerable Software and Affected Versions IBM Aspera Connect version 4.2.5 IBM Aspera Cargo version 4.2.5

Description The issue is caused by improper bounds checking, leading to a buffer overflow. An attacker could overflow a buffer and execute arbitrary code on the system.

Recommendations For IBM Aspera Connect version 4.2.5, update to a version that fixes the buffer overflow issue. For IBM Aspera Cargo version 4.2.5, update to a version that fixes the buffer overflow issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.