CVE-2020-4435

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180901.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2020-06-10

Last modified

2024-09-16

Weaknesses

CWE-787

Affected products

• Aspera Application Platform On Demand (Ibm)
• Aspera Faspex On Demand (Ibm)
• Aspera High-speed Transfer Endpoint (Ibm)
• Aspera High-speed Transfer Server (Ibm)
• Aspera High-speed Transfer Server For Cloud Pak For Integration (Ibm)
• Aspera High-speed Transfer Server For Cloud Pak For Integration Cp4i (Ibm)
• Aspera Proxy Server (Ibm)
• Aspera Server On Demand (Ibm)
• Aspera Shares On Demand (Ibm)
• Aspera Streaming (Ibm)
• Aspera Transfer Cluster Manager (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/180901
• https://www.ibm.com/support/pages/node/6221324