IBM Aspera Faspex 5.0.5 could allow a remote attacked to... · CVE-2023-35906 · GitHub Advisory Database · GitHub

IBM Aspera Faspex 5.0.5 could allow a remote attacked to...

High severity Unreviewed Published Sep 5, 2023 to the GitHub Advisory Database • Updated Sep 20, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM X-Force ID: 259649.

References

Published by the National Vulnerability Database

Sep 5, 2023

Published to the GitHub Advisory Database Sep 5, 2023

Last updated Sep 20, 2024

Weaknesses

CWE-291

Reliance on IP Address for Authentication

The product uses an IP address for authentication. Learn more on MITRE.

CWE-345

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data. Learn more on MITRE.

CWE-348

Use of Less Trusted Source

The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack. Learn more on MITRE.