CVE-2023-37396: IBM Aspera Faspex

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data. IBM X-Force ID: 259671.

Affected products

• IBM Aspera Faspex: from 5.0.0, before 5.0.8 (fixed in 5.0.8)

Published 2024-04-19. Last modified 2026-06-17.