CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-56473: IBM Aspera Shares Data Manipulation
5.3
CVSS
Description
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers.
Classification
CVE ID: CVE-2024-56473
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.3
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Products
Vendor: IBM
Product: Aspera Shares
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 19.84% (scored less or equal to compared to others)
EPSS Date: 2025-03-06 (when was this score calculated)