CVE-2025-36225

IBM Aspera Faspex information disclosure PUBLISHED

Description (CNA)

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.

Affected (CNA)

Vendor / product	Versions
IBM / Aspera Faspex	affected 5.0.0 through 5.0.13.1

CWE

CWE-203

References

https://www.ibm.com/support/pages/node/7247502

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.