PT-2025-53587 · Ibm · Ibm Aspera Faspex

Published 2025-12-26 · Updated 2025-12-29 · CVE-2025-36229

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex 5 versions 5.0.0 through 5.0.14.1

Description Authenticated users may be able to enumerate sensitive information regarding data due dates by enumerating package identifiers. The issue involves the potential disclosure of data related to package identification.

Recommendations Update to a version later than 5.0.14.1.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-36229

Affected Products

Ibm Aspera Faspex

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-36229 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36229 · Vendor Advisory
• https://t.me/cveNotify/147057 · Telegram Post
• https://ibm.com/support/pages/node/7255331 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2004666599555399856 · Twitter Post
• https://t.me/CVEtracker/40712 · Telegram Post