CVE-2023-27283: IBM Aspera Orchestrator

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545.

Affected products

• IBM Aspera Orchestrator: version 4.0.1 only

Published 2024-05-04. Last modified 2026-06-17.