CVE-2020-4435

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2020
Source publication: Jun 10, 2020
Source updated: Sep 16, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180901.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Aspera Transfer Cluster Manager

Vendor: IBM
Product: Aspera Transfer Cluster Manager
Platforms: Unknown
Default status: Unknown

Aspera Transfer Cluster Manager · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.3.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Aspera High-Speed Transfer Server

Vendor: IBM
Product: Aspera High-Speed Transfer Server
Platforms: Unknown
Default status: Unknown

Aspera High-Speed Transfer Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.9.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

Aspera Shares On Demand

Vendor: IBM
Product: Aspera Shares On Demand
Platforms: Unknown
Default status: Unknown

Aspera Shares On Demand · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

Aspera Application Platform On Demand

Vendor: IBM
Product: Aspera Application Platform On Demand
Platforms: Unknown
Default status: Unknown

Aspera Application Platform On Demand · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

Aspera Proxy Server

Vendor: IBM
Product: Aspera Proxy Server
Platforms: Unknown
Default status: Unknown

Aspera Proxy Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.4.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

Aspera Faspex On Demand

Vendor: IBM
Product: Aspera Faspex On Demand
Platforms: Unknown
Default status: Unknown

Aspera Faspex On Demand · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

Aspera Server On Demand

Vendor: IBM
Product: Aspera Server On Demand
Platforms: Unknown
Default status: Unknown

Aspera Server On Demand · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.7.4	`affected`	Unavailable	Unavailable	Unavailable	None listed

Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)

Vendor: IBM
Product: Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)
Platforms: Unknown
Default status: Unknown

Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.9.10	`affected`	Unavailable	Unavailable	Unavailable	None listed

Aspera Streaming

Vendor: IBM
Product: Aspera Streaming
Platforms: Unknown
Default status: Unknown

Aspera Streaming · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.9.3	`affected`	Unavailable	Unavailable	Unavailable	None listed

Aspera High-Speed Transfer Endpoint

Vendor: IBM
Product: Aspera High-Speed Transfer Endpoint
Platforms: Unknown
Default status: Unknown

Aspera High-Speed Transfer Endpoint · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.9.3	`affected`	Unavailable	Unavailable	Unavailable	None listed