CVE-2024-45096

MEDIUM

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information through a directory listing.

Affects 1 product across 1 vendor.

CVSS 3.16.5
EPSS0.4%
Percentile29th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, no integrity impact, no availability impact.
CWE Weakness Definitions
CWE-548: CWE-548
◆ AI Analysis — automated analysis, not human-reviewed

{ "executive_summary": "IBM Aspera Faspex versions 5.0.0 through 5.0.9 are vulnerable to a directory listing issue that could allow a user with access to the package to obtain sensitive information.", "attack_vector_detail": "An attacker with access to a package in IBM Aspera Faspex can exploit a directory listing vulnerability to access sensitive files and directories that should not be publicly accessible.", "affected_components": ["IBM Aspera Faspex 5.0.0", "IBM Aspera Faspex 5.0.1", "IBM Aspera Faspex 5.0.2", "IBM Aspera Faspex 5.0.3", "IBM Aspera Faspex 5.0.4", "IBM Aspera Faspex 5.0.5", "IBM Aspera Faspex 5.0.6", "IBM Aspera Faspex 5.0.7", "IBM Aspera Faspex 5.0.8", "IBM Aspera Faspex 5.0.9"], "explo

BSID: BS-2024-GLOBAL-212973-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-45096?
{ "executive_summary": "IBM Aspera Faspex versions 5.0.0 through 5.0.9 are vulnerable to a directory listing issue that could allow a user with access to the package to obtain sensitive information.", "attack_vector_detail": "An attacker with access to a package in IBM Aspera Faspex can exploit a directory listing vulnerability to access sensitive files and directories that should not be publicly accessible.", "affected_components": ["IBM Aspera Faspex 5.0.0", "IBM Aspera Faspex 5.0.1", "I
What is the CVSS score for CVE-2024-45096?
CVE-2024-45096 has CVSS 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS: 0.4%.
Is CVE-2024-45096 actively exploited?
No confirmed active exploitation of CVE-2024-45096 as of 2026-05-30.
How do I remediate CVE-2024-45096?
Priority: LOW. Advisory: https://www.ibm.com/support/pages/node/7167255 PSIRT: [email protected]
What systems are affected by CVE-2024-45096?
CVE-2024-45096 affects Ibm Aspera Faspex.
Vulnerability Details
CVE IDCVE-2024-45096
BSIDBS-2024-GLOBAL-212973-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published2024-09-05
Last Modified2024-09-06
ICS Relevance0%
Weakness (CWE)
CWE-548
SourceNVD
Official Description

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information through a directory listing.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information through a directory listing. CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Ibm Aspera Faspex ≥ 5.0.0, < 5.0.10
Remediation
View Vendor Advisory →

Remediation Priority: LOW

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 770 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash8672aa13e59a5c686a8d7b51c3e59fe17e3ae5dadfab9b48f7b71dcd0bc7207973977cc9fde36fee071cc18e508a9e95df9cf7faa55ad65234eabb370d3ed26c
Related CVEs affecting Ibm
CVE-2009-3699 10.0 Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in ... CVE-2010-3187 10.0 Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to... CVE-2009-3517 10.0 nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not prope... CVE-2009-3935 10.0 Multiple unspecified vulnerabilities in the Advanced Management Module firmwa... CVE-2010-3754 10.0 The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in ...
View all Ibm CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →