A vulnerability was found in IBM Aspera Orchestrator up to 4.1.0. It has been rated as critical. The affected element is an unknown function. Performing manipulation results in unverified password change.
This vulnerability is cataloged as CVE-2025-13148. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2025-13148 | IBM Aspera Orchestrator up to 4.1.0 unverified password change
A vulnerability was found in IBM Aspera Orchestrator up to 4.1.0. It has been rated as critical. The affected element is an unknown function. Performing manipulation results in unverified password change. This vulnerability is cataloged…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR