- Vendor / Project
- IBM
- Product
- Aspera Faspex
- Date added
- Feb 21, 2023
- Due date
- Mar 14, 2023
- Known ransomware use
- Known
- CWEs
- CWE-502
Description
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.
Required action
Apply updates per vendor instructions.