CVE-2023-37400

HIGH

IBM Aspera Faspex < 5.0.8 - Insufficiently Protected Credentials

Title source: rule

Description

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential storage. IBM X-Force ID: 259677.

References (2)

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 6.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-522
Status published

Affected Products (1)

ibm/aspera_faspex < 5.0.8

Timeline

Published Apr 19, 2024
Tracked Since Feb 18, 2026