CVE-2026-75621
MediumCVSS 6.2Summary
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
Risk Assessment
The risk includes unauthorized access to sensitive data by a local attacker, potentially leading to confidentiality and integrity compromise.
Recommendation
Upgrade IBM Aspera Enterprise WebApps to the latest version and review/restrict service account permissions to the least privilege.
Other vulnerabilities in IBM Aspera Enterprise WebApps
See all- CVE-2026-92832Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
- CVE-2026-75782High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable.
- CVE-2026-75095High
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-75076Medium
A vulnerability in IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.
- CVE-2026-75777High
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.5 allow a local attacker to escape container protections due to unrestricted system calls permitted within the container.
Original NVD description (English source)
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS