CVE-2025-36228

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 may allow inconsistent permissions between the user interface and backend API allowed users to access features that appeared disabled, potentially leading to misuse.

Score

CVSS 3.1 3.8 Low

Status

Analyzed - psirt@us.ibm.com

Published

2025-12-26

Last modified

2026-10-07

Weaknesses

CWE-279

Affected products

• Aspera Faspex (Ibm)
• Aspera Faspex 5 (Ibm)

References

• https://www.ibm.com/support/pages/node/7255331