high7.1
CVE-2025-33137
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another u…
Impact
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aspera Faspex | from 5.0.0 before 5.0.12.1 |