IBM Aspera Shares Cryptographic Vulnerability Allowing Decryption of Sensitive Information

A vulnerability exists in IBM Aspera Shares versions 1.9.9 prior to 1.11.0, where weaker than expected cryptographic algorithms could enable an attacker to decrypt highly sensitive information. This issue is categorized under CWE-327: Use of a Broken or Risky Cryptographic Algorithm.

Impact

Exploitation of this vulnerability could lead to unauthorized decryption of sensitive information, potentially exposing confidential data to attackers.

Remediation

Users can upgrade to IBM Aspera Shares version 1.11.1 to address this vulnerability. Instructions for downloading this version are available on the IBM Support Fix Central website.