IBM Aspera Console Log File Information Disclosure Vulnerability

Vulnerability

A vulnerability exists in IBM Aspera Console version 3.4.7, where potentially sensitive information is stored in log files. This information could be accessed by a local privileged user.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information contained in log files.

Remediation

Users are advised to upgrade to IBM Aspera Console version 3.4.8. Instructions for downloading this version are available on the IBM Support Fix Central website.

Added: Jan 20, 2026, 3:43 PM
Updated: Jan 20, 2026, 3:43 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
2.5
exploitability
3.0
remediation
7.7
relevance
2.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.