CVE Vulnerabilities

CVE-2023-37412

Execution with Unnecessary Privileges

Published: Jan 29, 2025 | Modified: Mar 04, 2025
CVSS 3.x
4.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access controls.

Weakness

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Affected Software

Name Vendor Start Version End Version
Aspera_faspex Ibm 5.0.0 (including) 5.0.10 (including)

Potential Mitigations

References