The vulnerability in IBM Aspera Faspex 5 (versions 5.0.0 through 5.0.15.4) concerns improper session management, specifically a weakness that could allow unauthorized access or session misuse. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) indicates that the vulnerability is remotely exploitable without privileges or user interaction, with high confidentiality impact, low integrity impact, and no availability impact. The issue is categorized as CWE-613, which relates to insufficient session expiration or invalidation controls. No known exploits in the wild have been reported. The vulnerability has been addressed in versions later than 5.0.15.4.

Successful exploitation could lead to unauthorized disclosure of sensitive information due to session management weaknesses. The confidentiality impact is high, meaning attackers could gain access to protected data. Integrity impact is low, indicating limited ability to alter data, and availability is not affected. There are no reports of active exploitation in the wild.

A fix is available as the vulnerability has been addressed in versions after 5.0.15.4. Users should upgrade IBM Aspera Faspex 5 to a version later than 5.0.15.4 to remediate this issue. Since no vendor advisory or patch link is provided, users should consult IBM's official resources for the exact fixed version and update instructions. Patch status is confirmed by the statement that versions through 5.0.15.4 are affected and the issue has been addressed thereafter.