PT-2020-18067 · Ibm · Ibm Aspera

Published 2020-06-10 · Updated 2021-07-21 · CVE-2020-4435

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Aspera (affected versions not specified)

Description The issue allows an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service, due to arbitrary memory corruption based on the product configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-4435

Affected Products

Ibm Aspera

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/180901 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4435 · Vendor Advisory
• https://ibm.com/support/pages/node/6221324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4435 · Security Note
• https://t.me/cvenotify/4281 · Telegram Post