Skip to content
CVE PROGRAM SOURCE RECORD3.8 Low

CVE-2025-36228

Incorrect Execution-Assigned Permissions in IBM Aspera Faspex

Description

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 may allow inconsistent permissions between the user interface and backend API allowed users to access features that appeared disabled, potentially leading to misuse.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Aspera Faspex 5

  • 5.0.0 to ≤ 5.0.14.1affected

References