Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. IBM X-Force ID: 180810.
https://www.ibm.com/support/pages/node/6221324
https://exchange.xforce.ibmcloud.com/vulnerabilities/180810
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4432