CVE-2022-43840

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.

IBM Aspera Console 3.4.0 a 3.4.4 es vulnerable a una vulnerabilidad de inyección XPath, que podría permitir que un atacante autenticado filtre datos confidenciales de la aplicación y/o determine la estructura del documento XML.