5.9
Medium
CVE-2023-22862 IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method…
Description
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aspera Connect | 4.2.5 | No fix stated |
| Aspera Cargo | 4.2.5 | No fix stated |
Other CVEs of Aspera Connect
The 5 CVEs of Aspera Connect →
CVE-2026-120115
Multiple vulnerabilities in IBM Aspera Connect
6.3
Medium
CVE-2026-120113
Multiple vulnerabilities in IBM Aspera Connect
6.4
Medium
CVE-2023-27285
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds…
8.4
High
CVE-2020-4545
IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper…
7.8
High