IBM Aspera Console
Moderate fix2 remedies
cpe:2.3:a:ibm:aspera_console:*:*:*:*:*:*:*
Moderate fix2 remedies
- >= 3.3.0, <= 3.4.8
IBM Aspera Console Username Enumeration Vulnerability
Vulnerability
Patched
A vulnerability in IBM Aspera Console versions 3.3.0 through 3.4.8 allows for username enumeration. This issue arises from an observable discrepancy in response behavior, which could be exploited to infer the existence of usernames.
Impact
Exploitation of this vulnerability could lead to unauthorized username enumeration, allowing attackers to verify the existence of user accounts.
Remediation
Users are advised to upgrade to IBM Aspera Console version 3.4.9. Instructions for downloading this version are available on the IBM Support Fix Central website.
Added: Mar 16, 2026, 2:52 PM
Updated: Mar 16, 2026, 2:52 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
0.6exploitability
7.0remediation
7.7relevance
4.0threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.