Lucene search
China National Vulnerability DatabaseCNVD-2023-11690HistoryFeb 21, 2023 - 12:00 a.m.
IBM Aspera Faspex Deserialization Vulnerability
2023-02-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
27
IBM Aspera is an IBM FASP protocol-based fast file transfer and streaming solution from International Business Machines (IBM). IBM Aspera Faspex version 4.4.2 Patch Level 1 and prior versions contain a deserialization vulnerability that stems from a YAML deserialization flaw. An attacker could use this vulnerability to execute arbitrary code on the system.
Related
rapid7blog
rapid7blog
Active Exploitation of IBM Aspera Faspex CVE-2022-47986
2023-03-28 19:35:19
zdt
zdt
IBM Aspera Faspex 4.4.1 - YAML deserialization Remote Code Execution Exploit
2023-04-07 00:00:00
nuclei
nuclei
IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution
2023-02-03 09:18:45
cisa_kev
cisa_kev
IBM Aspera Faspex Code Execution Vulnerability
2023-02-21 00:00:00
cve
cve
CVE-2022-47986
2023-02-17 16:15:10
thn
thn
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Ibm Aspera Faspex
2023-02-03 06:32:13
Exploit for Deserialization of Untrusted Data in Ibm Aspera Faspex
2023-03-09 22:03:48
attackerkb
attackerkb
CVE-2022-47986
2023-02-17 00:00:00
prion
prion
Deserialization of untrusted data
2023-02-17 16:15:00
packetstorm
packetstorm
IBM Aspera Faspex 4.4.1 YAML Deserialization
2023-04-10 00:00:00
exploitdb
exploitdb
IBM Aspera Faspex 4.4.1 - YAML deserialization (RCE)
2023-04-07 00:00:00
cisa
cisa
CISA Adds Three Known Exploited Vulnerabilities to Catalog
2023-02-21 00:00:00
mmpc
mmpc
mssecure
mssecure
ibm
ibm
nessus
nessus
IBM Aspera Faspex < 4.4.2 Patch Level 2 Multiple Vulnerabilities
2023-03-20 00:00:00
Related for CNVD-2023-11690