Lucene search
IbmCVELIST:CVE-2023-27875HistoryMar 16, 2023 - 12:37 p.m.
CVE-2023-27875 IBM Aspera Faspex improper access controls
2023-03-1612:37:09
ibm
www.cve.org
4
cve-2023-27875
ibm aspera faspex
improper access controls
user credentials
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
36.7%
IBM Aspera Faspex 5.0.4 could allow a user to change other user’s credentials due to improper access controls. IBM X-Force ID: 249847.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Aspera Faspex",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "5.0.4"
}
]
}
]Related
cve
cve
CVE-2023-27875
2023-03-16 13:15:10
nvd
nvd
CVE-2023-27875
2023-03-16 13:15:10
cnvd
cnvd
IBM Aspera Access Control Error Vulnerability (CNVD-2023-20083)
2023-03-20 00:00:00
prion
prion
Improper access control
2023-03-16 13:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
36.7%
Related for CVELIST:CVE-2023-27875