VYPR
Get started
← All advisories
Medium severity6.3NVD Advisory· Published Apr 1, 2026· Updated Apr 6, 2026

CVE-2025-66483

CVE-2025-66483

Description

IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.

Affected products

1
  • IBM/Aspera Shares
    cpe:2.3:a:ibm:aspera_shares:*:-:*:*:*:*:*:*
    Range: >=1.9.9,<=1.11.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.