CVE-2022-43841 - IBM Aspera Console information disclosure

Back Back to CVE browser

MEDIUM

IBM Aspera Console information disclosure

Published May 30, 2024

4.0

MEDIUM

CVSS 3.1

EPSS 0.16%

Description

IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 239078.

Affected products

Vendor IBM Product Aspera Console Default
unaffected
- Version
  3.4.0 - 3.4.2 PL9
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Aspera Console

unaffected

Version	Status	Constraints
3.4.0 - 3.4.2 PL9	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-525

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46811
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/239078
vdb-entryVendor Advisory
https://www.ibm.com/support/pages/node/7155202
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46811		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/239078		vdb-entryVendor Advisory
https://www.ibm.com/support/pages/node/7155202		vendor-advisoryVendor Advisory