Description (CNA)
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Aspera Connect | affected 4.2.5 |
| IBM / Aspera Cargo | affected 4.2.5 |
CWE
CWE-523
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.