CVE-2024-56470
05.02.2025, 23:15
IBM Aspera Shares1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
| Vendor | Product | Version |
|---|---|---|
| ibm | aspera_shares | 1.9.0 ≤ 𝑥 < 1.10.0 |
| ibm | aspera_shares | 1.10.0 |
| ibm | aspera_shares | 1.10.0:patch_level1 |
| ibm | aspera_shares | 1.10.0:patch_level2 |
| ibm | aspera_shares | 1.10.0:patch_level3 |
| ibm | aspera_shares | 1.10.0:patch_level4 |
| ibm | aspera_shares | 1.10.0:patch_level5 |
| ibm | aspera_shares | 1.10.0:patch_level6 |
𝑥
= Vulnerable software versions