CVE-2026-75621: IBM Aspera Enterprise Webapps Execution with Unnecessary Privileges
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
Other sources
IBM Aspera Enterprise WebApps could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Aspera Enterprise WebAppsto a version that resolves this vulnerability.Fixed in 1.0.7
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access to the affected system. The available information does not indicate that remote access or user interaction is required.
Which installations are affected?
IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are affected.
What is the impact of successful exploitation?
A local attacker could obtain sensitive information because a service account has excessive permissions.