← Database

CVE-2025-13219

MEDIUM CVSS: 5.9 Published: 2026-03-10 Modified: 2026-06-17

Description

IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.

Affected Platforms

Linux Linux KernelIbm Aspera Orchestrator

Weakness Type

CWE-598

References