PT-2025-53586 · Ibm · Ibm Aspera Faspex

Published 2025-12-26 · Updated 2025-12-29 · CVE-2025-36228

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex 5 versions 5.0.0 through 5.0.14.1

Description The software may have inconsistent permissions between the user interface and backend API. This could allow users to access features that appear disabled, potentially leading to misuse.

Recommendations Update to a version later than 5.0.14.1.

Fix

Weakness Enumeration

CWE-279

Related Identifiers

CVE-2025-36228

Affected Products

Ibm Aspera Faspex

References · 7

• https://osv.dev/vulnerability/CVE-2025-36228 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36228 · Security Note
• https://twitter.com/CVEnew/status/2004666600624894335 · Twitter Post
• https://ibm.com/support/pages/node/7255331 · Patch, Vendor Advisory
• https://t.me/CVEtracker/40711 · Telegram Post
• https://t.me/cveNotify/146885 · Telegram Post
• https://t.me/cveNotify/147056 · Telegram Post