CVE:CVE-2022-22391
CNNVD:CNNVD-202204-3420
IBM Aspera是美国IBM公司的一套基于IBM FASP协议构建的快速文件传输和流解决方案。
IBM Aspera High-Speed Transfer 4.3.1版本及之前版本存在安全漏洞。攻击者利用该漏洞从他们不应访问的非敏感操作系统文件中获取信息。IBM X-Force ID: 222059。
solution:Upgrade ibm aspera_high-speed_transfer_endpoint to a higher version than 4.3.2,and avoid the version (,4.3.2); Upgrade ibm aspera_high-speed_transfer_server to a higher version than 4.3.2,and avoid the version (,4.3.2)