References https://nvd.nist.gov/vuln/detail/cve-2022-47986 https://www.ibm.com/support/pages/security-bulletin-ibm-aspera-faspex-442-pl2-has-addressed-multiple-vulnerabilities-cve-2022-28330-cve-2023-22868-cve-2022-30556-cve-2022-31813-cve-2022-30522-cve-2022-47986-cve-2022-28615-cve-2022-26377-cve-2018-25032-cve-2022-2068-3 https://www.sentinelone.com/vulnerability-database/cve-2022-47986/ https://github.com/mauricelambert/CVE-2022-47986 https://www.rapid7.com/blog/post/2023/03/28/etr-active-exploitation-of-ibm-aspera-faspex-cve-2022-47986/ https://www.acunetix.com/vulnerabilities/web/ibm-aspera-faspex-rce-cve-2022-47986/ https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=34113 https://www.exploit-db.com/exploits/51316 https://filestore.fortinet.com/fortiguard/outbreak_alert/ibm_aspera_faspex_code_execution_vulnerability/report.pdf https://www.quorumcyber.com/threat-intelligence/ibm-aspera-faspex-critical-vulnerability-under-active-exploitation-by-icefire-operators/ https://www.tenable.com/cve/CVE-2022-47986/plugins https://socprime.com/blog/detect-cve-2022-47986-exploits-critical-pre-authenticated-remote-code-execution-vulnerability-in-ibm-aspera-faspex/ https://access.redhat.com/security/cve/cve-2022-47986
Related VulnerabilitiesPoCCVE-2022-47986: IBM Aspera Faspex <=4.4.2 PL1 - Remote Code ExecutionPoCCVE-2022-47986: Aspera Faspex Pre Auth RCEIBM Aspera Console 跨站脚本漏洞Aspera Faspex relay_package 远程代码执行漏洞(CVE-2022-47986)IBM Aspera 日志信息泄露漏洞IBM Aspera Faspex YAML反序列化漏洞(CVE-2022-47986)