HexBrain

IBM · Report #3340797

IBM Aspera HTTP Gateway stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user.

Validstatus
highseverity
46upvotes
27 Apr 2026disclosed

Summary

IBM Aspera HTTP Gateway stores sensitive information in clear text was submitted to IBM, analyzed and has been remediated. Thank you to our external researcher jhon1231248e.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original