CVE-2024-45097
05.09.2024, 16:15
IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | aspera_faspex | 5.0.0 ≤ 𝑥 < 5.0.10 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-650 - Trusting HTTP Permission Methods on the Server SideThe server contains a protection mechanism that assumes that any URI that is accessed using HTTP GET will not cause a state change to the associated resource. This might allow attackers to bypass intended access restrictions and conduct resource modification and deletion attacks, since some applications allow GET to modify state.
- CWE-436 - Interpretation ConflictProduct A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.