IBM Aspera Shares Email Flooding Vulnerability

A denial-of-service vulnerability has been identified in IBM Aspera Shares versions 1.9.9 prior to 1.11.0. The issue arises because the application does not adequately limit how often an authenticated user can send emails. This lack of proper rate limiting could lead to email flooding.

Impact

Exploitation of this vulnerability could cause a denial-of-service condition by overwhelming the email system with excessive messages.

Remediation

Users can upgrade to IBM Aspera Shares version 1.11.1 to address this vulnerability. Instructions for downloading this version are available on the IBM Support Fix Central website.