CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2023-22862
High (7.5) in ibm. EPSS 0.6% chance of exploitation in the next 30 days.
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-523, CWE-522
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:aspera_cargo
- ibm:aspera_connect