CVE-2026-92832: IBM Aspera Enterprise Webapps Information Disclosure
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
Other sources
IBM Aspera Enterprise WebApps could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Aspera Enterprise WebAppsto a version that resolves this vulnerability.Fixed in 1.0.7
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are affected. The issue requires local attacker access.
What does an attacker need to exploit it?
An attacker needs local access to obtain sensitive information transmitted in cleartext. No privileges or user interaction are required according to the supplied CVSS vector.
What is the potential impact?
A successful attacker may obtain sensitive information. The supplied severity vector also indicates limited impact to confidentiality and integrity, with no availability impact.