IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information through a directory listing.CreditsJan van der Put, Jasper Westerman, Yanick de Pater of REQON B.V.Referenceshttps://www.ibm.com/support/pages/node/7167255