CVE-2021-38963: IBM Aspera Console CSV injection
IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerability. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Other sources
IBM Aspera Console could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerability. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38963?
CVE-2021-38963 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2021-38963?
To fix CVE-2021-38963, upgrade IBM Aspera Console to version 3.4.5 or later.
What type of vulnerability is CVE-2021-38963?
CVE-2021-38963 is a CSV injection vulnerability that enables arbitrary code execution.
Who can exploit CVE-2021-38963?
CVE-2021-38963 can be exploited by remote authenticated attackers.
What versions of IBM Aspera Console are affected by CVE-2021-38963?
IBM Aspera Console versions 3.4.0 to 3.4.4 are affected by CVE-2021-38963.