CVE-2020-4433: falha de alta gravidade em IBM Aspera Application Platform On Demand
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Aspera High-Speed Transfer Endpoint+ Monitorar Aspera High-Speed Transfer Server
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 5.3%
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force ID: 180814.
CVSS:3.0/AC:H/I:H/UI:N/PR:L/S:U/C:H/AV:N/A:H/RC:C/RL:O/E:U
Produtos afetados
IBM · Aspera Application Platform On DemandIBM · Aspera Faspex On DemandIBM · Aspera High-Speed Transfer EndpointIBM · Aspera High-Speed Transfer ServerIBM · Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)IBM · Aspera Proxy ServerIBM · Aspera Server On DemandIBM · Aspera Shares On DemandIBM · Aspera StreamingIBM · Aspera Transfer Cluster ManagerCVEs relacionadas — IBM Aspera Application Platform On Demand
No mesmo produto, das mais perigosas para as menos.