CVE-2023-38018: IBM Aspera Shares

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 260574.

Affected products

• IBM Aspera Shares: version 1.10.0 only

Published 2024-08-12. Last modified 2026-06-17.