PT-2024-31427 · Ibm · Ibm Aspera Faspex

Jan Van Der Put + 2 · Published 2024-09-05 · Updated 2024-09-06 · CVE-2024-45096

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex versions 5.0.0 through 5.0.9

Description A user with access to the package can obtain sensitive information through a directory listing. This issue affects users with package access, allowing them to get sensitive details.

Recommendations For versions 5.0.0 through 5.0.9, consider restricting access to sensitive directories to minimize the risk of exploitation. As a temporary workaround, limit the directory listing functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-548

Related Identifiers

CVE-2024-45096

Affected Products

Ibm Aspera Faspex

References · 7

• https://osv.dev/vulnerability/CVE-2024-45096 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45096 · Security Note
• https://ibm.com/support/pages/node/7167255 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1831783501105893685 · Twitter Post
• https://twitter.com/CVEnew/status/1831719476212981870 · Twitter Post
• https://t.me/cvenotify/93530 · Telegram Post
• https://t.me/cvedetector/4928 · Telegram Post