CVE-2022-43852: IBM Aspera Console

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system.

Affected products

• IBM Aspera Console: from 3.4.0, before 3.4.5 (fixed in 3.4.5)

Published 2025-04-14. Last modified 2026-06-17.