CVE-2025-33137

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security.

Score
CVSS 3.1 8.8 High
Status
Analyzed - psirt@us.ibm.com
Published
2025-05-22
Last modified
2025-08-26
Weaknesses
CWE-602

Affected products

References

 
 
© AVABIS GmbH privacypolicy about