Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. IBM X-Force ID: 180810.
References
Link | Resource |
---|---|
https://www.ibm.com/support/pages/node/6221324 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/180810 | VDB Entry Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2020-06-10 06:15
Updated : 2021-07-21 04:39
NVD link : CVE-2020-4432
Mitre link : CVE-2020-4432
JSON object : View
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
Products Affected
ibm
- aspera_shares_on_demand
- aspera_transfer_cluster_manager
- aspera_application_platform_on_demand
- aspera_streaming
- aspera_faspex_on_demand
- aspera_high-speed_transfer_server
- aspera_server_on_demand
- aspera_high-speed_transfer_endpoint
- aspera_high-speed_transfer_server_for_cloud_pak_for_integration
- aspera_proxy_server