NetSight
high7.5

CVE-2023-27871

IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query.

Impact

IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user, using a specially crafted SQL query. IBM X-Force ID: 249613.

Affected products

VendorProductAffected versions
IbmAspera Faspex
through 4.4.2
Version 4.4.2

Weakness classification

References