CVE-2023-37400: IBM Aspera Faspex

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential storage. IBM X-Force ID: 259677.

Affected products

• IBM Aspera Faspex: from 5.0.0, before 5.0.8 (fixed in 5.0.8)

Published 2024-04-19. Last modified 2026-06-17.