PT-2026-6553 · Ibm · Ibm Aspera Console

CVE-2025-13379 · Publicado 2026-02-05 · Atualizado 2026-02-12

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions IBM Aspera Console versions 3.4.0 through 3.4.8

Description The software is susceptible to a SQL injection issue. A remote attacker could potentially send crafted SQL statements to access, modify, or delete data within the back-end database. The attacker could exploit this through specially crafted SQL statements.

Recommendations IBM Aspera Console versions 3.4.0 through 3.4.8 are affected and should be updated.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-13379

Produtos afetados

Ibm Aspera Console

Referências · 9

• https://osv.dev/vulnerability/CVE-2025-13379 · Aviso do Fabricante
• https://twitter.com/TheHackerWire/status/2019415635827257503 · Publicação no Twitter
• https://t.me/cveNotify/151867 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2019409643211018330 · Publicação no Twitter
• https://t.me/cveNotify/150982 · Publicação no Telegram
• https://twitter.com/CveFindCom/status/2019504131363197087 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2019431511758442803 · Publicação no Twitter
• https://ibm.com/support/pages/node/7259448 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-13379 · Nota de Segurança