Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2024-38315
Disclosure Date: September 16, 2024 (last updated September 21, 2024)
IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.
0
Attacker Value
Unknown
CVE-2023-38018
Disclosure Date: August 12, 2024 (last updated August 30, 2024)
IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 260574.
0
