Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2025-36229

Exposure of Sensitive System Information to an Unauthorized Control Sphere in IBM Aspera Faspex

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 could allow authenticated users to enumerate sensitive information of data due by enumerating package identifiers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Aspera Faspex 5

  • 5.0.0 to ≤ 5.0.14.1affected

References