{"id":"CVE-2024-56473","aliases":["EUVD-2024-53171","GHSA-gvrr-q7f9-rx5j"],"status":"published","title":"IBM Aspera Shares Data Manipulation","description":"IBM Aspera Shares 1.9.0 through 1.10.0 PL6  could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00291,"percentile":0.21893,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-116","CWE-117"],"published":"2025-02-05T23:01:29Z","modified":"2026-06-17T08:12:14Z","products":[{"vendor":"ibm","product":"aspera shares"},{"vendor":"ibm","product":"aspera_shares"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7182490","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56473"},{"url":"https://github.com/advisories/GHSA-gvrr-q7f9-rx5j"}],"sources":{"cve":[{"id":"CVE-2024-56473","title":"IBM Aspera Shares Data Manipulation","description":"IBM Aspera Shares 1.9.0 through 1.10.0 PL6  could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers.","status":"published","published":"2025-02-05T23:01:29.837Z","modified":"2025-02-22T22:15:04.704Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-117"],"updated_at":"2026-11-02T14:33:57.983942Z"}],"euvd":[{"id":"EUVD-2024-53171","description":"IBM Aspera Shares 1.9.0 through 1.10.0 PL6  could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers.","status":"published","published":"2025-02-05T23:01:29Z","modified":"2025-02-22T22:15:04Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:25.517067Z"}],"ghsa":[{"id":"GHSA-gvrr-q7f9-rx5j","title":"IBM Aspera Shares 1.9.0 through 1.10.0 PL6  could allow an attacker to spoof their IP address,...","description":"IBM Aspera Shares 1.9.0 through 1.10.0 PL6  could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers.","status":"published","published":"2025-02-06T06:31:26Z","modified":"2025-03-06T21:32:28Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-116","CWE-117"],"updated_at":"2026-11-02T15:00:10.810827Z"}],"nvd":[{"id":"CVE-2024-56473","description":"IBM Aspera Shares 1.9.0 through 1.10.0 PL6  could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP' headers.","status":"published","published":"2025-02-05T23:15:10.153Z","modified":"2026-06-17T08:12:14.6Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-117","CWE-116"],"updated_at":"2026-11-02T14:10:44.033107Z"}]}}