CVE-2023-37398

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...

CVE-2023-37398 IBM Aspera Faspex information disclosure

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...

CVE-2023-37398

IBM Aspera Faspex 5.0.0–5.0.10 are affected by a weakness where strong passwords are not required by default, enabling easier compromise of user accounts. The IBM security bulletin indicates remediation is available in Faspex 5.0.11. Public disclosures across multiple sources (NVD, Red Hat, CVE l...