CVE-2024-56470

Name of the Vulnerable Software and Affected Versions: IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6

Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This is due to a server-side request forgery (SSRF) vulnerability.

Recommendations: For versions 1.9.0 through 1.10.0 PL6, as a temporary workaround, consider restricting access to sensitive network resources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.