CVE-2023-27873 IBM Aspera Faspex information disclosure

IBM Aspera Faspex 4.4.2 could allow a remote authenticated attacker to obtain sensitive credential information using specially crafted XML input. IBM X-Force ID: 249654...

CVE-2023-27873

Summary: CVE-2023-27873 affects IBM Aspera Faspex 4.4.2. An authenticated remote attacker could obtain sensitive credential information by sending specially crafted XML input, per multiple sources (IBM X-Force ID 249654; Red Hat bulletin; CNVD/CVE references). The initial records assign a CVSSv3....