CVE-2023-37396

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data. IBM X-Force ID: 259671.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2024-04-19

Last modified

2024-09-20

Weaknesses

CWE-327

Affected products

• Aspera Faspex (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/259671
• https://www.ibm.com/support/pages/node/7148632