CVE-2022-43851

Summary

IBM Aspera Console 3.4.0 through 3.4.4

uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected Software

VendorProductVersion RangeStatus
IBMAspera Console3.4.0 <= 3.4.4affected

Weaknesses

  • CWE-327: CWE-327 Use of a Broken or Risky Cryptographic Algorithm

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References