16499 matches found
CVE-2023-27272
CVE-2023-27272 – IBM Aspera Console affected: IBM Aspera Console 3.4.0–3.4.4. Issue: passwords can be reused when a new user logs in, as described in multiple sources including the IBM Security Bulletin and NVD entry. Root cause details are not explicitly stated beyond the password reuse behavior...
CVE-2022-43852 IBM Aspera Console information disclosure
IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system...
CVE-2022-43852 IBM Aspera Console information disclosure
IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system...
CVE-2022-43852
CVE-2022-43852 affects IBM Aspera Console, with versions 3.4.0–3.4.4 vulnerable to disclosure of sensitive information in HTTP headers. The Red Hat/IBM bulletin and multiple aggregations confirm the issue, and remediation is to upgrade to IBM Aspera Console 3.4.5. The root cause is information di...
CVE-2022-43847 IBM Aspera Console HTTP header injection
IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking...
CVE-2022-43847 IBM Aspera Console HTTP header injection
IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking...
CVE-2022-43847
IBM Aspera Console versions 3.4.0–3.4.4 are affected by an HTTP header injection vulnerability caused by improper validation of HOST header input. This could enable attackers to perform cross-site scripting, cache poisoning, or session hijacking against the vulnerable system. The issue is documen...
PT-2025-16268 · Ibm · Ibm Aspera Console
Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For IBM...
IBM Aspera Console encryption issue vulnerability
IBM Aspera Console is a Web-based application from International Business Machines IBM. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. An encryption issue vulnerability exists in IBM Aspera Console 3.4.4 and prior versions, which stems from the use of a...
IBM Aspera Console security vulnerability
IBM Aspera Console is a Web-based application from International Business Machines IBM, Inc. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. A security vulnerability exists in IBM Aspera Console 3.4.4 and prior versions, which stems from improper...
IBM Aspera Console security vulnerability
IBM Aspera Console is a Web-based application from International Business Machines IBM, Inc. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. A security vulnerability exists in IBM Aspera Console 3.4.4 and prior versions, which stems from the disclosure o...
IBM Aspera Console Cross-site Scripting Vulnerability
IBM Aspera Console is a Web-based application from International Business Machines IBM, Inc. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. A cross-site scripting vulnerability exists in IBM Aspera Console 3.4.4 and prior versions, which stems from...
IBM Aspera Console security vulnerability
IBM Aspera Console is a Web-based application from International Business Machines IBM, Inc. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. A security vulnerability exists in IBM Aspera Console 3.4.4 and prior versions, which stems from an XPath injecti...
PT-2025-16269 · Ibm · Ibm Aspera Console
Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue could disclose sensitive information in HTTP headers, which could be used in further attacks against the system. Recommendations: For IBM Aspera Console versions 3.4.0...
vt_ioctl() Function Heap Buffer Overflow DoS
Vulnerability of the vtioctl function in the drivers/tty/vt/vtioctl.c module – The driver for supporting TTY consoles in Linux operating systems is vulnerable to integer overflow or cyclic shift attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-16266 · Ibm · Ibm Aspera Console
Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue is an XPath injection vulnerability that could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document...
PT-2025-16263 · Ibm · Ibm Aspera Console
Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue is caused by improper validation of input by the HOST headers, leading to HTTP header injection. This could allow an attacker to conduct various attacks against the...
PT-2025-16270 · Ibm · Ibm Aspera Console
Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue allows passwords to be reused when a new user logs into the system. Recommendations: For IBM Aspera Console versions 3.4.0 through 3.4.4, consider implementing a password...
PT-2025-16267 · Ibm · Ibm Aspera Console
Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...
