IBM Aspera Enterprise WebApps vulnerabilities

A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.

A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 allow a local attacker to escape container protections due to unrestricted system calls permitted within the container.