CVE-2020-4435

Published: Jun 10, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180901.

Affected (10)

Products: Ibm: Aspera Application Platform On Demand, Aspera Faspex On Demand, Aspera High Speed Transfer Endpoint, Aspera High Speed Transfer Server, Aspera High Speed Transfer Server For Cloud Pak For Integration, Aspera Proxy Server, Aspera Server On Demand, Aspera Shares On Demand, Aspera Streaming, Aspera Transfer Cluster Manager

Ibm

10 products

Aspera Application Platform On Demand

Aspera Faspex On Demand

Aspera High Speed Transfer Endpoint

Aspera High Speed Transfer Server

Aspera High Speed Transfer Server For Cloud Pak For Integration

Aspera Proxy Server

Aspera Server On Demand

Aspera Shares On Demand

Aspera Streaming

Aspera Transfer Cluster Manager

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Ibm Aspera Application Platform On Demand	Up to 3.7.4
Ibm Aspera Faspex On Demand	Up to 3.7.4
Ibm Aspera High Speed Transfer Endpoint	Up to 3.9.3
Ibm Aspera High Speed Transfer Server	Up to 3.9.3
Ibm Aspera High Speed Transfer Server For Cloud Pak For Integration	Up to 3.9.10
Ibm Aspera Proxy Server	Up to 1.4.3
Ibm Aspera Server On Demand	Up to 3.7.4
Ibm Aspera Shares On Demand	Up to 3.7.4
Ibm Aspera Streaming	Up to 3.9.3
Ibm Aspera Transfer Cluster Manager	Up to 1.3.1