CVE-2022-22497: High severity ibm aspera faspex on demand vulnerability
Published May 24, 2022
·Updated
IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. IBM X-Force ID: 226951.
Affected Software
2 affected components
IBM Aspera Faspex=4.4.1
IBM Aspera Faspex=5.0.0
Remediation
Patch Available
Event History
May 24, 2022
CVE Published
via MITRE·09:40 PM
Data Sourced
via MITRE·09:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for IBM Aspera Faspex?
The vulnerability ID for IBM Aspera Faspex is CVE-2022-22497.
2
What is the severity of CVE-2022-22497?
The severity of CVE-2022-22497 is high with a severity value of 7.5.
3
Which versions of IBM Aspera Faspex are affected by CVE-2022-22497?
IBM Aspera Faspex versions 4.4.1 and 5.0.0 are affected by CVE-2022-22497.
4
How does IBM Aspera Faspex allow unauthorized access due to an incorrectly computed security token?
IBM Aspera Faspex allows unauthorized access due to an incorrectly computed security token, which can be exploited by attackers to gain unauthorized access to the system.
5
How can I fix the vulnerability in IBM Aspera Faspex?
To fix the vulnerability in IBM Aspera Faspex, it is recommended to upgrade to a fixed version or apply a patch provided by IBM.