Description
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Aspera Connect | 4.2.5 | — |
| IBM | Aspera Cargo | 4.2.5 | — |
References
- https://www.ibm.com/support/pages/node/7001053 vendor-advisory