Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-27871

IBM Aspera Faspex information disclosure

Description

IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query. IBM X-Force ID: 249613.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Aspera Faspex

Default version status: unaffected

  • 4.4.2affected

References