Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Aspera Console CSV injection
Vulnerability Description
IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerability. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
CWE-1236
Vulnerability Title
IBM Aspera Console 安全漏洞
Vulnerability Description
IBM Aspera Console是美国国际商业机器（IBM）公司的一个基于 Web 的应用程序。允许用户集中管理、监控和控制 Aspera 服务器（节点）和传输。 IBM Aspera Console 3.4.0至3.4.4版本存在安全漏洞，该漏洞源于CSV注入，可能允许远程已认证的攻击者通过诱使受害者打开特殊构造的文件来执行系统上的任意代码。
CVSS Information
N/A
Vulnerability Type
N/A