NetSight
high8.1

CVE-2025-13148

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that pass…

Impact

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.

Affected products

VendorProductAffected versions
IbmAspera Orchestrator
from 4.0.0 before 4.1.1

Weakness classification

References