← Back

CVE-2022-43841

nvd nist
Published: May 30, 2024Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 239078.

Affected (10)

Products: Ibm: Aspera Console
Ibm
1 product
Aspera Console
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Aspera Console
From 3.4.0 to 3.4.2
Aspera Console
Version 3.4.2 patch_level_1
Aspera Console
Version 3.4.2 patch_level_2
Aspera Console
Version 3.4.2 patch_level_3
Aspera Console
Version 3.4.2 patch_level_4
Aspera Console
Version 3.4.2 patch_level_5
Aspera Console
Version 3.4.2 patch_level_6
Aspera Console
Version 3.4.2 patch_level_7
Aspera Console
Version 3.4.2 patch_level_8
Aspera Console
Version 3.4.2 patch_level_9

Related CWEs

CWE-525
Use of Web Browser Cache Containing Sensitive Information
The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.

References (4)

Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.