CVE-2023-35907 MEDIUM

CVE-2023-35907: IBM Aspera Faspex information disclosure

Vendor Ibm

Product Aspera Faspex

Weakness CWE-521

Published January 29, 2025

Last update February 12, 2025

View on NVD All CVEs

CVSS base score

5.9/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Key dates

02Disclosure timeline

January 29, 2025 CVE published

February 12, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-35907 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/521.html

Related vulnerabilities

CVE-2023-35907: IBM Aspera Faspex information disclosure

01Description

02Disclosure timeline

03References

04Related CVE