Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-36040 EUVD-2025-23212GHSA-v7j8-qgf8-rf5g

IBM Aspera Faspex session fixation

Published Jul 30, 2025 · Updated Jul 31, 2025 · Assigned by ibm

Description

IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.

Affected products

VendorProductAffectedFixed
IBM Aspera Faspex 5.0.0 – ≤ 5.0.12.1 —

References