medium5.3
CVE-2025-13460
IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.
Impact
IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aspera Console | from 3.3.0 before 3.4.9 |