Severity
High
Analysis Summary
CVE-2022-43842
IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Impact
- Data Manipulation
Indicators Of Compromise
CVE
- CVE-2022-43842
Affected Vendors
IBM
Affected Products
- IBM Aspera Console 3.4.0
- IBM Aspera Console 3.4.2
Remediation
Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.