Vulnerability Description
IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Aspera Faspex | >= 5.0.0, < 5.0.12.1 |
| Linux | Linux Kernel | - |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7234114Vendor Advisory
FAQ
What is CVE-2025-33137?
CVE-2025-33137 is a vulnerability with a CVSS score of 7.1 (HIGH). IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of ser...
How severe is CVE-2025-33137?
CVE-2025-33137 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-33137?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Aspera Faspex, Linux Linux Kernel.