PT-2025-39643 · Ibm · Aspera Http Gateway

Jhon1231248E · Published 2025-09-26 · Updated 2025-12-11 · CVE-2025-36274

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Aspera HTTP Gateway versions 2.0.0 through 2.3.1

Description The IBM Aspera HTTP Gateway stores sensitive information in clear text within easily accessible files. An unauthenticated user can read these files.

Recommendations Update to a version later than 2.3.1.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2025-16001

CVE-2025-36274

Affected Products

Aspera Http Gateway

References · 11

• https://bdu.fstec.ru/vul/2025-16001 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-36274 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36274 · Vendor Advisory
• https://t.me/CVEtracker/33465 · Telegram Post
• https://ibm.com/support/pages/node/7246284 · Vendor Advisory, Patch
• https://twitter.com/NightfallCVE/status/1971599459055493199 · Twitter Post
• https://t.me/cveNotify/136858 · Telegram Post
• https://t.me/cveNotify/136598 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1971729740193989015 · Twitter Post
• https://twitter.com/CVEnew/status/1971598940819587149 · Twitter Post
• https://t.me/cveNotify/145510 · Telegram Post