CVE-2025-13459

概要

参考情報

• ibm.com/support/pages/node/7263486 · Vendor Advisory

aspera console のその他の脆弱性

• CVE-2025-13460中 5.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.
• CVE-2025-13212中 4.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper c…
• CVE-2025-13379高 8.6IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which …
• CVE-2025-13925中 4.9IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged user.
• CVE-2023-27272高 8.8IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system.