PT-2023-21385 · Ibm · Ibm Aspera Faspex
CVE-2023-27871
·
Publicado
2023-03-21
·
Atualizado
2025-02-25
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Aspera Faspex version 4.4.2
Description
The issue allows a remote attacker to obtain sensitive credential information for an external user using a specially crafted SQL query.
Recommendations
For IBM Aspera Faspex version 4.4.2, update to a version that includes a fix for this issue, as using a specially crafted SQL query could allow a remote attacker to obtain sensitive credential information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Aspera Faspex