← Database

CVE-2025-13148

HIGH CVSS: 8.1 Published: 2025-12-11 Modified: 2026-06-17

Description

IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.

Affected Platforms

Linux Linux KernelIbm Aspera Orchestrator

Weakness Type

CWE-620

References