IBM Aspera Faspex Denial-of-Service Vulnerability via Improperly Validated API Input

A denial-of-service vulnerability has been identified in IBM Aspera Faspex versions 5.0.0 through 5.0.13.1. This issue allows a privileged user to cause excessive resource consumption, leading to a denial-of-service condition. The vulnerability arises from improperly validated API input, which can be exploited to consume resources disproportionately.

Impact

Exploitation of this vulnerability can lead to excessive resource consumption, causing a denial-of-service condition on the affected system.

Remediation

Users are advised to upgrade to IBM Aspera Faspex version 5.0.14, available through the IBM Update Catalog.