CVE-2025-13212

概要

参考情報

• ibm.com/support/pages/node/7263486 · Vendor Advisory

aspera console のその他の脆弱性

• CVE-2025-13460中 5.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.
• CVE-2025-13459中 4.9IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral …
• CVE-2025-13379高 8.6IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which …
• CVE-2025-13925中 4.9IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user.
• CVE-2023-27272高 8.8IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system.