Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-37407

IBM Aspera Orchestrator command execution

Description

IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 260116.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Aspera Orchestrator

Default version status: unaffected

  • 4.0.1affected

References