CVE-2022-22405

CVSS V2 None CVSS V3 None

Description

IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 222576.

Overview

CVE ID
CVE-2022-22405

Assigner
ibm

Vulnerability Status
PUBLISHED

Published Version
2023-09-08T20:12:02.057Z

Last Modified Date
2023-09-08T20:12:02.057Z

Weakness Enumerations

CWE	URL
CWE-311	http://cwe.mitre.org/data/definitions/311.html

References

Reference URL	Reference Tags
https://www.ibm.com/support/pages/node/7029681	vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/222576	vdb-entry

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-22405
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22405

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 18:04:56				Added to TrackCVE