Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-38316 EUVD-2024-37115GHSA-44w2-c6gq-2xxx

IBM Aspera Shares Denial of Service

Published Feb 5, 2025 · Updated Feb 22, 2025 · Assigned by ibm

Description

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.

Affected products

VendorProductAffectedFixed
IBM Aspera Shares 1.9.0 – ≤ 1.10.0 PL6 —

References