CVE-2023-27286

Name of the Vulnerable Software and Affected Versions IBM Aspera Cargo version 4.2.5 IBM Aspera Connect version 4.2.5

Description The issue is caused by improper bounds checking, leading to a buffer overflow. An attacker could exploit this to execute arbitrary code on the system.

Recommendations For IBM Aspera Cargo version 4.2.5, update to a version that includes the fix for the buffer overflow issue. For IBM Aspera Connect version 4.2.5, update to a version that includes the fix for the buffer overflow issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.