CVE-2023-22862

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2023-06-05

Last modified

2025-01-08

Weaknesses

CWE-522, CWE-523

Affected products

• Aspera Cargo (Ibm)
• Aspera Connect (Ibm)

References

• https://www.ibm.com/support/pages/node/7001053
• https://exchange.xforce.ibmcloud.com/vulnerabilities/244107