CVE-2022-43852

IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-04-14

Last modified

2025-08-15

Weaknesses

CWE-497

Affected products

• Aspera Console (Ibm)

References

• https://www.ibm.com/support/pages/node/7169766