CVE-2025-36274

IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user.

Score

CVSS 3.1 7.5 High

Status

Analyzed - psirt@us.ibm.com

Published

2025-09-26

Last modified

2026-10-11

Weaknesses

CWE-319

Affected products

• Aspera Http Gateway (Ibm)

References

• https://www.ibm.com/support/pages/node/7246284