IBM Security Bulletin: Aspera HSTS, HSTE and Desktop Client application is affected by openSSL vulnerabilities (CVE-2017-3735)

Sep 15, 2018 9:00 am EDT

Categorized: Medium Severity

Share this post:

Aspera High-Speed Transfer Server (formerly known as Enterprise Server and Connect Server), High-Speed Transfer Endpoint (formerly known as Point-to-Point Client) and Desktop Client application have addressed the following openSSL vulnerabilities.

CVE(s): CVE-2017-3735

Affected product(s) and affected version(s):

Affected Products	Affected Versions
IBM Aspera High-Speed Transfer Server	3.8.0 and earlier
IBM Aspera High-Speed Endpoint	3.8.0 and earlier
IBM Aspera Desktop Client	3.8.0 and earlier

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10731163
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131047

from IBM Product Security Incident Response Team https://ift.tt/2MyRuEt