IBM Aspera Console
Moderate fix2 remedies
cpe:2.3:a:ibm:aspera_console:*:*:*:*:*:*:*
Moderate fix2 remedies
- >= 3.4.0, <= 3.4.4
IBM Aspera Console HTTP Header Injection Vulnerability
Vulnerability
Patched
A vulnerability allowing HTTP header injection has been identified in IBM Aspera Console versions 3.4.0 to 3.4.4. This issue arises from inadequate validation of the HOST header input, which could enable an attacker to perform various attacks on the affected system, such as cross-site scripting, cache poisoning, or session hijacking.
Impact
Exploitation of this vulnerability could lead to HTTP header injection, allowing for cross-site scripting, cache poisoning, or session hijacking.
Remediation
Users are advised to upgrade to IBM Aspera Console version 3.4.5. Instructions for downloading this version are available on the IBM Support Fix Central website.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
1.7exploitability
4.9remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.