CVE-2025-33137CWE-602

IBM Aspera Faspex data modification

High · published May 22, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Weakness
CWE-602 · Client-Side Enforcement of Server-Side Security
Published
2025-05-22T16:36Z
EPSS history
Timeline
  • 22 MAY 16:36Z
    IBM Aspera Faspex data modification
    cvelistv5