CVE-2023-22862 (published 2023-06-04T23:42:57.221Z)
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.  IBM X-Force ID:  244107.
Affected products: Vendor: IBM
Product: Aspera Connect
Versions: 4.2.5