CVE-2025-14480 MEDIUM

CVE-2025-14480: IBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptographic algorithms

Vendor Ibm
Product Aspera faspio Gateway
Weakness CWE-327 · Broken crypto
Published March 3, 2026
Last update March 3, 2026
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information

Key dates

02Disclosure timeline

March 3, 2026 CVE published
March 3, 2026 Record updated