CVE-2024-56470: IBM Aspera Shares Server-Side Request Forgery
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Other sources
IBM Aspera Shares is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56470?
The severity of CVE-2024-56470 is classified as a medium vulnerability due to its potential to facilitate unauthorized access and network enumeration.
How do I fix CVE-2024-56470?
To fix CVE-2024-56470, upgrade IBM Aspera Shares to a version beyond 1.10.0 PL6, where the vulnerability has been addressed.
What type of attack can CVE-2024-56470 facilitate?
CVE-2024-56470 can facilitate server-side request forgery (SSRF) attacks, allowing unauthorized requests from the server.
Is CVE-2024-56470 exploitable remotely?
CVE-2024-56470 requires authenticated access, making it primarily exploitable by users with credentials.
What are the risks associated with CVE-2024-56470?
The risks associated with CVE-2024-56470 include potential unauthorized actions and data exposure due to network enumeration.