Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. IBM X-Force ID: 180810.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm aspera application platform on demand |
||
ibm aspera faspex on demand |
||
ibm aspera high-speed transfer endpoint |
||
ibm aspera high-speed transfer server |
||
ibm aspera high-speed transfer server for cloud pak for integration |
||
ibm aspera proxy server |
||
ibm aspera server on demand |
||
ibm aspera shares on demand |
||
ibm aspera streaming |
||
ibm aspera transfer cluster manager |
Vulmon