IBM Aspera Console Sensitive Information Disclosure Vulnerability

Vulnerability

A vulnerability in IBM Aspera Console versions 3.4.0 to 3.4.4 could lead to the unintentional disclosure of sensitive information through HTTP headers. This information might be leveraged for further attacks against the system.

Impact

Exploitation of this vulnerability could result in the disclosure of sensitive information, which could be used to facilitate additional attacks on the system.

Remediation

Users are advised to upgrade to IBM Aspera Console version 3.4.5. Instructions for downloading this version are available on the IBM Support Fix Central website.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
2.5
exploitability
7.0
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.