CVE-2023-37395

Summary

CVE-2023-37395 is a vulnerability affecting IBM Aspera Faspex versions 5.0.0 through 5.0.7. This issue permits local users to gain unauthorized access to sensitive information due to inadequate encryption of specific data types within the software. The vulnerability poses a potential risk to organizational security, as unintended access to confidential data can lead to data breaches and other security incidents. IBM recommends users upgrade to a patched version of Faspex as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.