CVE-2020-4731: XSS
IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188055.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4731?
CVE-2020-4731 is classified as a cross-site scripting (XSS) vulnerability, which can pose a significant risk to user credentials and session security.
How do I fix CVE-2020-4731?
To mitigate CVE-2020-4731, users should upgrade to IBM Aspera Web Application version 1.9.14 PL2 or later where the vulnerability is addressed.
Who is affected by CVE-2020-4731?
CVE-2020-4731 affects users of IBM Aspera Shares version 1.9.14 and earlier.
What types of attacks can CVE-2020-4731 enable?
CVE-2020-4731 can enable attacks that allow malicious JavaScript to be executed in the context of the user's session.
Is CVE-2020-4731 easy to exploit?
Exploitation of CVE-2020-4731 may be relatively straightforward for attackers familiar with XSS techniques.