| Package | Affected versions | Patched versions |
|---|---|---|
| aspera cargo | < 4.2.6 | 4.2.6 |
| aspera connect | < 4.2.6 | 4.2.6 |
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free