PT-2024-11662

CVE-2022-43841

·

Published

2024-05-30

·

Updated

2025-01-08

Description by

CVSS 3.1
4.0
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Aspera Console versions 3.4.0 through 3.4.2 PL9
Description The issue allows web pages to be stored locally, which can then be read by another user on the system.
Recommendations For IBM Aspera Console versions 3.4.0 through 3.4.2 PL9, consider restricting access to sensitive web pages to minimize the risk of unauthorized access until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾