CVE-2022-43840

IBM Aspera Console XPath injection PUBLISHED

Description (CNA)

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.

Affected (CNA)

Vendor / product	Versions
IBM / Aspera Console	affected 3.4.0 through 3.4.4

CWE

CWE-643

References

https://www.ibm.com/support/pages/node/7169766

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.