CVE-2025-33137

IBM Aspera Faspex data modification PUBLISHED

Description (CNA)

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security.

Affected (CNA)

Vendor / product	Versions
IBM / Aspera Faspex	affected 5.0.0 through 5.0.12

CWE

CWE-602

References

https://www.ibm.com/support/pages/node/7234114

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.