CVE-2022-43842

Description

References

• exchange.xforce.ibmcloud.com/vulnerabilities/239079 · Vendor Advisory
• ibm.com/support/pages/node/7122632 · Vendor Advisory

aspera console 的其他漏洞

• CVE-2025-13460中危 5.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.
• CVE-2025-13459中危 4.9IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral …
• CVE-2025-13212中危 4.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper c…
• CVE-2025-13379高危 8.6IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which …
• CVE-2025-13925中危 4.9IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user.