← Back

CVE-2025-13219

nvd nist
Published: Mar 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.

Affected (1)

Ibm
1 product
Aspera Orchestrator
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aspera Orchestrator
From 3.0.0 to 4.1.3
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-598
Use of GET Request Method With Sensitive Query Strings
The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.