PT-2022-6902 · Ibm · Ibm Aspera Faspex

Published 2022-01-03 · Updated 2023-09-13 · CVE-2022-22409

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex version 5.0.5

Description The issue is related to an insecure configuration in the application, which may allow a remote attacker to gather sensitive information about the web application. This is due to insufficient protection of service data.

Recommendations For IBM Aspera Faspex version 5.0.5, consider reconfiguring the application to ensure proper protection of service data until a patch is available. As a temporary workaround, restrict access to sensitive information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2023-05460

CVE-2022-22409

Affected Products

Ibm Aspera Faspex

References · 9

• https://ibm.com/support/pages/node/7029681 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05460 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/222592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22409 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22409 · Vendor Advisory
• https://t.me/cvenotify/57834 · Telegram Post
• https://twitter.com/CVEnew/status/1700262207282380935 · Twitter Post
• https://t.me/cvenotify/57908 · Telegram Post
• https://vuldb.com/ru/?id.239342 · Note