CVE-2023-22862CWE-523

IBM Aspera information disclosure

Medium · published June 4, 2023

CVSS v3.1
5.9
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00642 · 50.1th percentile
Weakness
CWE-523 · Unprotected Transport of Credentials
Published
2023-06-04T23:42Z
EPSS history
Timeline
  • 04 JUN 23:42Z
    IBM Aspera information disclosure
    cvelistv5