CVE-2026-92832
5.1MediumPublished 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Limited impact
- Weakness
- CWE-319
Impact
A local attacker can intercept sensitive information transmitted in cleartext. They only need local system access on the host running the application.
Root cause
The application transmits sensitive information over unencrypted cleartext channels.
Affected systems
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Fix & remediation
Upgrade to a fixed version newer than 1.0.6 per IBM advisory node 7291755. If upgrading immediately is not possible, restrict local system access to authorized administrators only.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.