7.1
Élevée
CVE-2025-33137 IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform…
Description
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aspera Faspex 5.0 | 5.0.0 → 5.0.12 | Pas de correctif indiqué |
Autres CVE de Aspera Faspex
Les 42 CVE de Aspera Faspex →
CVE-2026-123218
IBM Aspera Faspex Authorization Bypass
9.8
Critique
CVE-2025-36171
IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly…
4.9
Moyenne
CVE-2025-36225
IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user…
4.3
Moyenne
CVE-2023-37401
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be…
5.3
Moyenne