Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-35907 EUVD-2023-39899GHSA-4cfr-xp32-h9c9

IBM Aspera Faspex information disclosure

Published Jan 29, 2025 · Updated Feb 12, 2025 · Assigned by ibm

Description

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Affected products

VendorProductAffectedFixed
IBM Aspera Faspex 5.0.0 – ≤ 5.0.10 —

References