Information Disclosure in IBM Aspera HTTP Gateway

CVE-2025-36274

What is CVE-2025-36274?

The IBM Aspera HTTP Gateway versions 2.0.0 through 2.3.1 contains a vulnerability that allows sensitive information to be stored in clear text within accessible files. This data can be exploited by unauthenticated users, exposing sensitive information without the need for authentication. It is crucial for users of affected versions to apply security patches and harden their systems to protect against unauthorized data access.

References