CVE-2025-13219 — Multiple vulnerabilities in IBM Aspera Orchestrator

CVE-2025-13219

Multiple vulnerabilities in IBM Aspera Orchestrator PUBLISHED

Description (CNA)

IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.

Affected (CNA)

Vendor / product	Versions
IBM / Aspera Orchestrator	affected 3.0.0 through 4.1.2

CWE

CWE-598

References

https://www.ibm.com/support/pages/node/7263083

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.