Vulnerabilities > CVE-2023-30995 - Incorrect Authorization vulnerability in IBM Aspera Faspex

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
ibm
CWE-863
NVD
Published: 2023-09-08
Updated: 2024-11-21

Summary

IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268.

Vulnerable Configurations

Part Description Count
Application
Ibm
8
OS
Linux
1

Common Weakness Enumeration (CWE)

References