IBM Aspera Faspex
Moderate fix1 remedy
cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 5.0.0, <= 5.0.10
IBM Aspera Faspex Observable Response Discrepancy Vulnerability Leading to Username Disclosure
Vulnerability
Patched
A vulnerability in IBM Aspera Faspex versions 5.0.0 to 5.0.10 could allow the unintentional disclosure of sensitive username information. This issue arises from an observable response discrepancy that could be exploited to infer username details.
Impact
Exploitation of this vulnerability could lead to the unauthorized disclosure of usernames, potentially allowing for further targeted attacks or account compromises.
Remediation
Users are advised to upgrade to IBM Aspera Faspex version 5.0.11, available through the IBM Support Fix Central.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
1.9impact
2.5exploitability
7.4remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.