Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code through a service. IBM X-Force ID: 180902.
References
Link | Resource |
---|---|
https://www.ibm.com/support/pages/node/6221324 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/180902 | VDB Entry Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2020-06-10 06:15
Updated : 2020-06-15 12:10
NVD link : CVE-2020-4436
Mitre link : CVE-2020-4436
JSON object : View
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Products Affected
ibm
- aspera_shares_on_demand
- aspera_transfer_cluster_manager
- aspera_application_platform_on_demand
- aspera_streaming
- aspera_faspex_on_demand
- aspera_high-speed_transfer_server
- aspera_server_on_demand
- aspera_high-speed_transfer_endpoint
- aspera_high-speed_transfer_server_for_cloud_pak_for_integration
- aspera_proxy_server