CVE-2023-37413CWE-204

IBM Aspera Faspex information disclosure

Medium · published January 29, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.6th percentile
Weakness
CWE-204 · Observable Response Discrepancy
Published
2025-01-29T16:36Z
EPSS history
Timeline
  • 29 JAN 16:36Z
    IBM Aspera Faspex information disclosure
    cvelistv5