Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-13460 EUVD-2025-208660GHSA-5r2m-qjqr-rjxf

IBM Aspera Console Information Disclosure

Published Mar 13, 2026 · Updated Mar 16, 2026 · Assigned by ibm

Vendor: IBM Product: Aspera Console

Description

IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.

Affected products

VendorProductAffectedFixed
IBM Aspera Console 3.3.0 – ≤ 3.4.8 —

References