CVE-2024-56470

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Feb 5, 2025
CWE ID 918

Summary

CVE-2024-56470: IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6 contain a server-side request forgery (SSRF) vulnerability. This issue enables authenticated attackers to manipulate the system and send unauthorized network requests, potentially exposing sensitive information or providing a foundation for further attacks, such as network enumeration or traffic redirection.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Ibm Aspera Shares

Affected Vendors

  • IBM Corporation