CVE-2022-43851: IBM Aspera Console

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected products

• IBM Aspera Console: from 3.4.0, before 3.4.5 (fixed in 3.4.5)

Published 2025-04-14. Last modified 2026-06-17.