CVE-2022-43842

CVSS 3.1 Score 9.1 of 10 (high)

Details

Published Feb 23, 2024
Updated: Dec 31, 2024
CWE ID 89

Summary

CVE-2022-43842 is a SQL injection vulnerability affecting IBM Aspera Console versions 3.4.0 through 3.4.2. Maliciously crafted SQL statements sent to the software can grant a remote attacker unauthorized access to the back-end database, allowing them to view, add, modify, or delete data. IBM's X-Force has assigned ID 239079 to this security issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share