CVE-2025-36225

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-10-09

Last modified

2026-10-08

Weaknesses

CWE-203

Affected products

• Aspera Faspex (Ibm)

References

• https://www.ibm.com/support/pages/node/7247502