Back

CVE-2022-43841

May 30, 2024, 1:15 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

IBM Aspera Console

  • 3.4.0
  • 3.4.1
  • 3.4.2 PL9

Source

psirt@us.ibm.com

Tags

psirt@us.ibm.com
CWE-525
2024-05-30
CVE-2022-43841

CVE-2022-43841 details

Published : May 30, 2024, 12:15 p.m.
Last Modified : May 30, 2024, 1:15 p.m.

Description

IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 239078.

CVSS Score

1 2 3 4.0 5 6 7 8 9 10

Weakness

Weakness Name Description

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

Base Score

4.0

Exploitability Score

Impact Score

Base Severity

MEDIUM

Vector String : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

URL Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/239078 psirt@us.ibm.com
https://www.ibm.com/support/pages/node/7155202 psirt@us.ibm.com
This website uses the NVD API, but is not approved or certified by it.