CVE-2025-13460 IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response…

Description

IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Aspera Console 3.3	3.3.0 → 3.4.8	Pas de correctif indiqué

Autres CVE de Aspera Console

Les 18 CVE de Aspera Console →

CVE-2025-13212 IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email… 5.3 Moyenne CVE-2025-13459 IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper… 2.7 Faible CVE-2025-13379 IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection 8.6 Élevée CVE-2025-13925 IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local… 4.9 Moyenne