Skip to content

CVE record · 1 source

CVE-2026-120115

CVSS 6.3

IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints.

Vendor: IBM
Product: Aspera Connect
CVSS v3.1: 6.3 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness: CWE-862
Exposure class: File transfer, Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 2h ago

IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints.

IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints. An attacker who convinces a user to visit a malicious website could delete or inspect account configurations.

CVSS 6.3 CVE-2026-120115 IBM