Vulnerability Description
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Aspera Faspex | >= 5.0.0, < 5.0.12.1 |
| Linux | Linux Kernel | - |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7234114Vendor Advisory
FAQ
What is CVE-2025-33136?
CVE-2025-33136 is a vulnerability with a CVSS score of 7.1 (HIGH). IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed...
How severe is CVE-2025-33136?
CVE-2025-33136 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-33136?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Aspera Faspex, Linux Linux Kernel.