Aspera Enterprise Webapps
Monthly
Remote unauthenticated attackers can cause a denial of service in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 by exhausting resources through uncontrolled resource consumption (CWE-400). The flaw is network-reachable with low complexity, requires no privileges or user interaction, and results in high availability impact, yielding a CVSS 3.1 base score of 7.5. No public exploit code has been identified at time of analysis, and IBM has released a patch.
Local privilege escalation in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 stems from a misconfigured PATH environment variable (CWE-426) that lets a local attacker place a malicious executable in a directory searched before trusted system paths. Exploitation requires an existing low-privileged foothold on the host and a writable directory on the PATH, yielding high confidentiality, integrity and availability impact (CVSS 7.8, AV:L/PR:L/UI:N). No public exploit code and no confirmed active exploitation were identified at time of analysis; the vendor has published a fix.
Container escape in IBM Aspera Enterprise WebApps 1.0.0-1.0.5 allows a local attacker with low privileges inside the container to break out to the underlying host due to unrestricted system call access. The CVSS vector (S:C/C:H/I:H/A:H) reflects full host compromise as the post-escape impact, not merely container-level damage. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; IBM has released a patch.
Exposure of JavaScript source map files in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 lets remote attackers retrieve the original, unminified client-side source of the web application, exposing internal identifiers, endpoint references, comments and other development-time detail. Per the assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) no authentication or user interaction is required, and the impact is confined to a low-severity confidentiality loss - reconnaissance material rather than direct access, since integrity and availability are unaffected. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, and EPSS data was not provided; the vendor itself scored the attack vector as adjacent (AV:A), which would further limit exposure to attackers on the same local or logical network segment. This is a low-priority finding that is nonetheless a confirmed, genuinely disclosed product weakness.
Local information disclosure in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 allows an attacker who already has access to the host to read sensitive data by abusing a service account that was configured with excessive permissions. The flaw is a privilege-assignment problem (CWE-250) rather than a memory-safety or injection bug: because the service account holds rights beyond what it needs, anything reachable by that account - files, directories, or configuration - becomes reachable to a local user. Impact is confidentiality-only (C:H with I:N/A:N on CVSS 3.1, base 6.2, AV:L/AC:L/PR:N/UI:N), so no tampering or denial of service is involved, there is no network attack path, and there is no public exploit identified at time of analysis; IBM has published a fix referenced in advisory node/7291755.
Cleartext transmission of sensitive information in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 can allow a local attacker who can observe the relevant channel to obtain limited sensitive information. The assessed vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, meaning exploitation requires local access and no authentication or user interaction but only affects confidentiality; the CVE record lists a base score of 5.1. No public exploit identified at time of analysis, and a vendor patch is available per IBM's advisory.
Remote unauthenticated attackers can cause a denial of service in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 by exhausting resources through uncontrolled resource consumption (CWE-400). The flaw is network-reachable with low complexity, requires no privileges or user interaction, and results in high availability impact, yielding a CVSS 3.1 base score of 7.5. No public exploit code has been identified at time of analysis, and IBM has released a patch.
Local privilege escalation in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 stems from a misconfigured PATH environment variable (CWE-426) that lets a local attacker place a malicious executable in a directory searched before trusted system paths. Exploitation requires an existing low-privileged foothold on the host and a writable directory on the PATH, yielding high confidentiality, integrity and availability impact (CVSS 7.8, AV:L/PR:L/UI:N). No public exploit code and no confirmed active exploitation were identified at time of analysis; the vendor has published a fix.
Container escape in IBM Aspera Enterprise WebApps 1.0.0-1.0.5 allows a local attacker with low privileges inside the container to break out to the underlying host due to unrestricted system call access. The CVSS vector (S:C/C:H/I:H/A:H) reflects full host compromise as the post-escape impact, not merely container-level damage. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; IBM has released a patch.
Exposure of JavaScript source map files in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 lets remote attackers retrieve the original, unminified client-side source of the web application, exposing internal identifiers, endpoint references, comments and other development-time detail. Per the assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) no authentication or user interaction is required, and the impact is confined to a low-severity confidentiality loss - reconnaissance material rather than direct access, since integrity and availability are unaffected. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, and EPSS data was not provided; the vendor itself scored the attack vector as adjacent (AV:A), which would further limit exposure to attackers on the same local or logical network segment. This is a low-priority finding that is nonetheless a confirmed, genuinely disclosed product weakness.
Local information disclosure in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 allows an attacker who already has access to the host to read sensitive data by abusing a service account that was configured with excessive permissions. The flaw is a privilege-assignment problem (CWE-250) rather than a memory-safety or injection bug: because the service account holds rights beyond what it needs, anything reachable by that account - files, directories, or configuration - becomes reachable to a local user. Impact is confidentiality-only (C:H with I:N/A:N on CVSS 3.1, base 6.2, AV:L/AC:L/PR:N/UI:N), so no tampering or denial of service is involved, there is no network attack path, and there is no public exploit identified at time of analysis; IBM has published a fix referenced in advisory node/7291755.
Cleartext transmission of sensitive information in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 can allow a local attacker who can observe the relevant channel to obtain limited sensitive information. The assessed vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, meaning exploitation requires local access and no authentication or user interaction but only affects confidentiality; the CVE record lists a base score of 5.1. No public exploit identified at time of analysis, and a vendor patch is available per IBM's advisory.