Volerion logoVolerion
Volerion logoVolerion

IBM Aspera Shares IP Spoofing Vulnerability in Log Files

Vulnerability

A vulnerability in IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6 allows attackers to spoof their IP addresses by manipulating 'Client-IP' headers. This spoofed information is logged, creating a potential avenue for misleading log analysis or auditing.

Impact

Exploitation of this vulnerability could lead to IP address spoofing, with the fake IP addresses being recorded in log files. This could disrupt log integrity and potentially be used to impersonate another user or system.

Remediation

Users are advised to upgrade to IBM Aspera Shares version 1.10.0 PL7. Instructions for downloading this version are available on the IBM Support Fix Central website.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
0.6
exploitability
7.6
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.