CVE-2024-45098: IBM Aspera Faspex bypass security

Q: What is the severity of CVE-2024-45098?

CVE-2024-45098 has a moderate severity rating due to the potential for unauthorized resource modification.

Q: How does CVE-2024-45098 impact IBM Aspera Faspex?

CVE-2024-45098 allows users to bypass intended access restrictions within IBM Aspera Faspex, facilitating unauthorized actions.

Q: What versions of IBM Aspera Faspex are affected by CVE-2024-45098?

IBM Aspera Faspex versions 5.0.0 through 5.0.9 are affected by CVE-2024-45098.

Q: How can I mitigate the risks associated with CVE-2024-45098?

To mitigate CVE-2024-45098, it is recommended to upgrade IBM Aspera Faspex to version 5.0.10 or later.

Q: What type of vulnerability is CVE-2024-45098?

CVE-2024-45098 is an access control vulnerability that allows bypassing intended restrictions.

Published Sep 4, 2024

Updated

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.

Other sources

IBM Aspera Faspex could allow a user to bypass intended access restrictions and conduct resource modification.

— IBM

Affected Software

2 affected components

IBM Aspera Faspex 5<=5.0.0 - 5.0.9

IBM Aspera Faspex>=5.0.0<5.0.10

Event History

Sep 4, 2024

CVE Published

via IBM·12:00 AM

Sep 5, 2024

CVE Published

via MITRE·03:31 PM

Data Sourced

via MITRE·03:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7167255

Frequently Asked Questions

What is the severity of CVE-2024-45098?

CVE-2024-45098 has a moderate severity rating due to the potential for unauthorized resource modification.

How does CVE-2024-45098 impact IBM Aspera Faspex?

CVE-2024-45098 allows users to bypass intended access restrictions within IBM Aspera Faspex, facilitating unauthorized actions.

What versions of IBM Aspera Faspex are affected by CVE-2024-45098?