Description
IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Aspera Faspex | 5.0 – ≤ 5.0.5, 4.0 – ≤ 4.4.2 | — |
References
- https://www.ibm.com/support/pages/node/7029681 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/254268 vdb-entry
- https://www.ibm.com/support/pages/node/7048851 vendor-advisory