CVE-2022-43852 - IBM Aspera Console information disclosure

MEDIUM

IBM Aspera Console information disclosure

Published Apr 14, 2025

5.3

MEDIUM

CVSS 3.1

EPSS 0.31%

IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system.

Vendor IBM Product Aspera Console Default
unaffected
Affected
- ≥ 3.4.0, ≤ 3.4.4

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
IBM	Aspera Console	unaffected	Affected ≥ 3.4.0, ≤ 3.4.4

No remediation recorded yet.

Weaknesses (1)

CWE-497

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46822		Advisory
https://www.ibm.com/support/pages/node/7169766		vendor-advisorypatchVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Apr 14, 2025

Updated Aug 15, 2025

Reserved Oct 26, 2022

CISA Vulnrichment

Updated Apr 14, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner ibm

Published Apr 14, 2025

Updated Aug 15, 2025

GitHub

No data