CVE-2022-43575

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/238680 · Vendor Advisory
• ibm.com/support/pages/node/7155215 · Vendor Advisory

aspera console のその他の脆弱性

• CVE-2025-13460中 5.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.
• CVE-2025-13459中 4.9IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral …
• CVE-2025-13212中 4.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper c…
• CVE-2025-13379高 8.6IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which …
• CVE-2025-13925中 4.9IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user.