CVE-2023-37400: IBM Aspera Faspex privilege escalation
Published Apr 19, 2024
·Updated
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential storage. IBM X-Force ID: 259677.
Other sources
IBM Aspera Faspex could allow a local user to escalate their privileges due to insecure credential storage.
— IBM
Affected Software
2 affected components
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
IBM Aspera Faspex>=5.0.0<5.0.8
Event History
Apr 19, 2024
CVE Published
via MITRE·02:02 PM
Data Sourced
via MITRE·02:02 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-37400?
CVE-2023-37400 has a high severity rating due to its potential for privilege escalation.
2
How do I fix CVE-2023-37400?
To fix CVE-2023-37400, upgrade IBM Aspera Faspex to version 5.0.8 or later.
3
Who is affected by CVE-2023-37400?
CVE-2023-37400 affects users of IBM Aspera Faspex versions 5.0.0 through 5.0.7.
4
What type of vulnerability is CVE-2023-37400?
CVE-2023-37400 is a privilege escalation vulnerability caused by insecure credential storage.
5
Can CVE-2023-37400 be exploited remotely?
CVE-2023-37400 is primarily a local exploitation vulnerability, requiring local access to the system.