IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution
IBM Aspera Faspex through 4.4.2 Patch Level 1 is susceptible to remote code execution via a YAML deserialization flaw. This can allow an attacker to send a specially crafted obsolete API call and thereby execute arbitrary code, obtain sensitive data, and/or execute other unauthorized operations.
aspera_faspexPoC 已收录
CVSS9.8EPSS 94.3%