| Package | Affected versions | Patched versions |
|---|---|---|
| aspera shares | = 1.10.0≥ 1.0.0, < 1.10.0 | 1.10.0 |
IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free