CVE-2024-56473

IBM Aspera Shares Data Manipulation PUBLISHED

Description (CNA)

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers.

Affected (CNA)

Vendor / product	Versions
IBM / Aspera Shares	affected 1.9.0 through 1.10.0 PL6

CWE

CWE-117

References

https://www.ibm.com/support/pages/node/7182490

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.