medium4.3
CVE-2025-36225
IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of return…
Impact
IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aspera Faspex | from 5.0.0 before 5.0.14 |