7.5
High
CVE-2025-36274 IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files…
Description
IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aspera HTTP Gateway 2.0 | 2.0.0 → 2.3.1 | No fix stated |