CVE-2023-22862

—

CVSS 3.1

7.5 high

EPSS

<1%p44

Published

Jun 5, 2023 (Jun 5, 2023)

Modified

Jun 17, 2026

Description

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Vendors: ibm
Products: aspera cargo, aspera connect
Weakness: CWE-523, CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.