CVE-2022-43851: IBM Aspera Console information disclosure
IBM Aspera Console 3.4.0 through 3.4.4
uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-43851?
CVE-2022-43851 has been classified as a medium severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2022-43851?
To remediate CVE-2022-43851, upgrade IBM Aspera Console to version 3.4.5 or later which addresses the cryptographic weaknesses.
What are the risks associated with CVE-2022-43851?
The main risks of CVE-2022-43851 include the potential for attackers to decrypt sensitive data due to the use of weak cryptographic algorithms.
Which versions of IBM Aspera Console are affected by CVE-2022-43851?
IBM Aspera Console versions 3.4.0 through 3.4.4 are impacted by CVE-2022-43851.
Is there a workaround for CVE-2022-43851?
There are no official workarounds for CVE-2022-43851; the recommended action is to apply the security update to mitigate the risk.