CVE-2025-13460 IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response…

Description

IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.

Affected products and versions

Product	Affected versions	Fixed in
Aspera Console 3.3	3.3.0 → 3.4.8	No fix stated

Other CVEs of Aspera Console

The 18 CVEs of Aspera Console →

CVE-2025-13212 IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email… 5.3 Medium CVE-2025-13459 IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper… 2.7 Low CVE-2025-13379 IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection 8.6 High CVE-2025-13925 IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local… 4.9 Medium