CVE-2023-37413

Summary

CVE-2023-37413 is a vulnerability impacting IBM Aspera Faspex versions 5.0.0 to 5.0.10. This issue arises due to a discrepancy in response observations, resulting in the unintended disclosure of sensitive username information. An attacker can potentially exploit this vulnerability by analyzing the observable differences in responses from the targeted system. Organizations must update their Aspera Faspex installations to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.