PT-2022-15475 · Ibm · Aspera Faspex

Published 2022-05-24 · Updated 2023-01-24 · CVE-2022-22497

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex versions 4.4.1 through 5.0.0

Description The issue allows unauthorized access due to an incorrectly computed security token.

Recommendations For versions 4.4.1 and 5.0.0, update to a version that correctly computes the security token to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-22497

Affected Products

Aspera Faspex

References · 7

• https://ibm.com/support/pages/node/6589601 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22497 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/226951 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22497 · Security Note
• https://t.me/cibsecurity/43308 · Telegram Post
• https://t.me/cvenotify/30670 · Telegram Post
• https://t.me/cvenotify/42724 · Telegram Post