PT-2023-5220 · Ibm · Ibm Aspera Faspex

CVE-2023-35906

·

Publicado

2023-08-29

·

Atualizado

2024-09-20

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex version 5.0.5
Description The issue is related to improper access controls, allowing a remote attacker to bypass IP restrictions. This is due to insufficient authentication data verification, which can impact the integrity of protected information.
Recommendations For IBM Aspera Faspex version 5.0.5, consider restricting access to sensitive areas of the application to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-05828
CVE-2023-35906

Produtos afetados

Ibm Aspera Faspex