Threats tagged 'ghsa-78r2-chvp-r9hc'

IBM Aspera Connect versions 1.6.1 through 4.2.19 have a vulnerability that allows remote attackers to obtain sensitive information and modify host trust configurations. This is due to missing authentication and overly permissive cross-origin resource sharing (CORS) policies in the local HTTP service. An attacker can exploit this by tricking a user into visiting a malicious web page, which then performs unauthorized cross-origin requests to read and alter configuration data.