Vulnerability in Ibm Aspera Faspex

CVE-2022-22497

IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951.

EPSS: 0.003 (52.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/PR:N/UI:N/AV:N/I:N/C:H/A:N/AC:L/S:U/RL:O/RC:C/E:U.

Affected products

Ibm Aspera Faspex — versions 4.4.1, 5.0.0

References

www.ibm.com/support/pages/node/6589601 (x_refsource_CONFIRM)
ibm-aspera-cve202222497-unauth-access (226951) (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2022-22497?: CVE-2022-22497 is a high-severity vulnerability in Ibm Aspera Faspex. CVSS score: 7.5/10. Published 2022-05-24.
How severe is CVE-2022-22497?: High severity. CVSS v3 base score is 7.5 out of 10.