Data Exposure in IBM Aspera Faspex Affects User Confidentiality

CVE-2025-33136

What is CVE-2025-33136?

IBM Aspera Faspex versions 5.0.0 to 5.0.12 are susceptible to a security flaw that may allow authenticated users to gain access to sensitive information or carry out unauthorized actions on behalf of other users. This vulnerability arises from insufficient safeguards on assumed immutable data, potentially compromising user privacy and data integrity. Organizations utilizing these affected versions should take immediate action to mitigate exposure to this risk and enhance their security posture.

References