← Volver a CVEs
CVE-2022-43852
MEDIUM5.3
Descripcion
IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system.
Detalles CVE
Puntuacion CVSS v3.15.3
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado4/14/2025
Ultima modificacion7/17/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
ibm:aspera_consolelinux:linux_kernelmicrosoft:windows
Debilidades (CWE)
CWE-497
Referencias
https://www.ibm.com/support/pages/node/7169766(psirt@us.ibm.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.