CVE-2024-56472

Summary

CVE-2024-56472 is a stored cross-site scripting (XSS) vulnerability affecting IBM Aspera Shares versions 1.9.0 through 1.10.0 PL6. Authenticated users can exploit this issue by embedding malicious JavaScript code within the Web UI, altering its intended functionality and potentially disclosing sensitive credentials within a trusted session. This vulnerability poses a significant security risk, allowing attackers to gain unauthorized access to protected data. IBM strongly recommends users update to a patched version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.