Lucene search
HistorySep 05, 2024 - 4:15 p.m.
CVE-2024-45097
ibm
aspera
faspex
security
bypass
vulnerability
resource modification
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
EPSS
0.001
Percentile
16.8%
IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.
Affected configurations
Node
ibmaspera_faspexRange5.0.0–5.0.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | aspera_faspex | * | cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2024-45097 IBM Aspera Faspex bypass security
2024-09-05 15:35:56
cve
cve
CVE-2024-45097
2024-09-05 16:15:08
vulnrichment
vulnrichment
CVE-2024-45097 IBM Aspera Faspex bypass security
2024-09-05 15:35:56
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
EPSS
0.001
Percentile
16.8%
Related for NVD:CVE-2024-45097