Lucene search
IbmCVE-2023-30995HistorySep 08, 2023 - 9:15 p.m.
CVE-2023-30995
2023-09-0821:15:45
CWE-863
ibm
web.nvd.nist.gov
61
ibm
aspera
faspex
ip whitelist
bypass
security vulnerability
cve-2023-30995
nvd
x-force id 254268
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
43.4%
IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268.
Affected configurations
Node
ibmaspera_faspexRange≤5.0.5
linuxlinux_kernelMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | aspera_faspex | * | cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*:* |
| linux | linux_kernel | - | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Aspera Faspex",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "5.0.5",
"status": "affected",
"version": "5.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.4.2",
"status": "affected",
"version": "4.0",
"versionType": "semver"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2023-09-08 21:15:00
ibm
ibm
nvd
nvd
CVE-2023-30995
2023-09-08 21:15:45
cvelist
cvelist
CVE-2023-30995 IBM Aspera Faspex improper access control
2023-09-08 20:56:37
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
43.4%
Related for CVE-2023-30995