CVE-2026-92832
MediumCVSS 5.1Summary
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
Risk Assessment
The risk includes disclosure of sensitive data to someone with local access, potentially leading to confidentiality breach.
Recommendation
Upgrade IBM Aspera Enterprise WebApps to the latest version and implement encryption for all transmitted data (e.g., TLS).
Other vulnerabilities in IBM Aspera Enterprise WebApps
See all- CVE-2026-75782High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
- CVE-2026-75621Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
- CVE-2026-75095High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-75076Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.
- CVE-2026-75777High
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 allow a local attacker to escape container protections due to unrestricted system calls permitted within the container.
Original NVD description (English source)
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS