← Back

CVE-2025-36274

nvd nist
Published: Sep 26, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user.

Affected (1)

Ibm
1 product
Aspera Http Gateway
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Aspera Http Gateway
From 2.0.0 to 2.3.2

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.