Security Advisory

CVE-2021-38963

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-09-24 10:15:56
Last updated 2024-09-24 13:49:57
Assigner ibm
CVSS score 8.0
State PUBLISHED

Description

IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerability. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.