CVEvulnerability

CVE-2026-7876

9.1 CRITICAL Published 2026-05-27 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2026-05-27
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-287

Description

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not in place.

Affected configurations

• ibm aspera high-speed transfer server for cloud pak for integration (>= 1.5.1 < 1.5.20)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References