Description (CNA)
Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. IBM X-Force ID: 180810.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Aspera Streaming | affected 3.9.3 |
| IBM / Aspera High-Speed Transfer Endpoint | affected 3.9.3 |
| IBM / Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I) | affected 3.9.10 |
| IBM / Aspera Server On Demand | affected 3.7.4 |
| IBM / Aspera Faspex On Demand | affected 3.7.4 |
| IBM / Aspera Proxy Server | affected 1.4.3 |
| IBM / Aspera Application Platform On Demand | affected 3.7.4 |
| IBM / Aspera Shares On Demand | affected 3.7.4 |
| IBM / Aspera High-Speed Transfer Server | affected 3.9.3 |
| IBM / Aspera Transfer Cluster Manager | affected 1.3.1 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/pages/node/6221324
- https://exchange.xforce.ibmcloud.com/vulnerabilities/180810
ADP enrichment
No English description supplied.