Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-36039 EUVD-2025-23213GHSA-jhrh-wrwc-j5hr

IBM Aspera Faspex bypass security

Published Jul 30, 2025 · Updated Jul 31, 2025 · Assigned by ibm

Description

IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms,

Affected products

VendorProductAffectedFixed
IBM Aspera Faspex 5.0.0 – ≤ 5.0.12.1 —

References