medium5.9
CVE-2023-22862
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized in…
Impact
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aspera Cargo | before 4.2.6 |
| Ibm | Aspera Connect | before 4.2.6 |