CVE-2022-40745 — Inadequate Encryption Strength in IBM Aspera Faspex

CWE-326 — Inadequate Encryption Strength3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 89.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Aspera Faspex
Timeline
PublishedApr 19

Description

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security. IBM X-Force ID: 236452.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/aspera_faspex5.0.0 — 5.0.7
▶NVDibm/aspera_faspex5.0.0 — 5.0.7

🔴Vulnerability Details

2
CVEList
IBM Aspera Faspex information disclosure↗2024-04-19
▶
GHSA
GHSA-2wrh-3gmh-mgcw: IBM Aspera Faspex 5↗2024-04-19
▶
CVE-2022-40745 — Inadequate Encryption Strength in IBM | cvebase