Description
IBM Aspera 5.0.0 through 5.0.13.1
could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Aspera Faspex | 5.0.0 – ≤ 5.0.13.1 | — |
References
- https://www.ibm.com/support/pages/node/7247502 vendor-advisory patch