Lucene search
HistorySep 08, 2023 - 10:15 p.m.
CVE-2022-22409
ibm
aspera
faspex
5.0.5
insecure configuration
vulnerability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
36.8%
IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application, caused by an insecure configuration. IBM X-Force ID: 222592.
Affected configurations
Node
ibmaspera_faspexRange≤5.0.5
linuxlinux_kernelMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | aspera_faspex | * | cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*:* |
| linux | linux_kernel | - | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
Related
prion
prion
Default configuration
2023-09-08 22:15:00
cvelist
cvelist
CVE-2022-22409 IBM Aspera Faspex information disclosure
2023-09-08 21:19:00
cve
cve
CVE-2022-22409
2023-09-08 22:15:09
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
36.8%
Related for NVD:CVE-2022-22409