IBM Aspera Shares
Moderate fix2 remedies
cpe:2.3:a:ibm:aspera_shares:*:*:*:*:*:*:*
Moderate fix2 remedies
- >= 1.9.9, <= 1.11.0
IBM Aspera Shares Session Management Vulnerability Allowing User Impersonation
Vulnerability
Patched
A vulnerability exists in IBM Aspera Shares versions 1.9.9 through 1.11.0, where the application fails to invalidate user sessions after a password reset. This oversight could enable an authenticated user to impersonate another user on the system.
Impact
Exploitation of this vulnerability could lead to unauthorized user impersonation.
Remediation
Users can upgrade to IBM Aspera Shares version 1.11.1 to address this vulnerability. Instructions for downloading this version are available on the IBM Support Fix Central website.
Added: Apr 1, 2026, 11:38 PM
Updated: Apr 1, 2026, 11:38 PM
Vulnerability Rating
Custom Algorithm
spread
1.0impact
1.3exploitability
5.2remediation
7.7relevance
5.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.