Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-43852 EUVD-2022-46822GHSA-fg3p-xv26-qc77

IBM Aspera Console information disclosure

Published Apr 14, 2025 · Updated Aug 15, 2025 · Assigned by ibm

Vendor: IBM Product: Aspera Console

Description

IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system.

Affected products

VendorProductAffectedFixed
IBM Aspera Console 3.4.0 – ≤ 3.4.4 —

References