CVE-2023-35907

published 2025-01-29

CVE-2023-35907: IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	aspera_faspex	5.0.0 – 5.0.10	—

CWE-521