Lucene search
HistoryJun 05, 2023 - 12:15 a.m.
CVE-2023-22862
ibm
aspera
connect
cargo
authentication
vulnerability
interception
retrieval
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
41.3%
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. IBM X-Force ID: 244107.
Affected configurations
Node
ibmaspera_cargoRange<4.2.6
ORibmaspera_connectRange<4.2.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | aspera_cargo | * | cpe:2.3:a:ibm:aspera_cargo:*:*:*:*:*:*:*:* |
| ibm | aspera_connect | * | cpe:2.3:a:ibm:aspera_connect:*:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2023-06-05 00:15:00
cvelist
cvelist
CVE-2023-22862 IBM Aspera information disclosure
2023-06-04 23:42:57
cnvd
cnvd
IBM Aspera Cargo and IBM Aspera Connect Information Disclosure Vulnerability
2023-06-06 00:00:00
cve
cve
CVE-2023-22862
2023-06-05 00:15:09
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
41.3%
Related for NVD:CVE-2023-22862