PT-2025-31460 · Ibm · Aspera Faspex

Published 2025-07-29 · Updated 2025-07-31 · CVE-2025-36039

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex versions 5.0.0 through 5.0.12.1

Description IBM Aspera Faspex versions 5.0.0 through 5.0.12.1 may allow an authenticated user to perform unauthorized actions due to client-side enforcement of server-side security mechanisms.

Recommendations Update IBM Aspera Faspex to a version later than 5.0.12.1.

Fix

Weakness Enumeration

CWE-602

Related Identifiers

BDU:2025-09496

CVE-2025-36039

Affected Products

Aspera Faspex

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-36039 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36039 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09496 · Security Note
• https://t.me/cveNotify/130335 · Telegram Post
• https://ibm.com/support/pages/node/7241007 · Patch, Vendor Advisory
• https://t.me/CVEtracker/28798 · Telegram Post
• https://twitter.com/CVEnew/status/1950727419503219120 · Twitter Post