high8.4
CVE-2023-27285
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checking.
Impact
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248625.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aspera Cargo | before 4.2.6 |
| Ibm | Aspera Connect | before 4.2.6 |