IBM Aspera Connect versions 1.6.1 through 4.2.19 have a vulnerability where origin verification is not consistently enforced across all REST API endpoints. This flaw allows an attacker who tricks a user into visiting a malicious website to potentially delete or inspect the user's account configurations.