IBM Aspera Faspex 5 versions 5.0.0 through 5.0.15.4 contain a flaw in session‑management handling, as identified by CWE‑613. The vulnerability could allow an attacker to interfere with or misuse session data, potentially granting unauthorized access to services or sensitive resources. The official CVE description does not detail specific privilege escalation or data‑exfiltration capability, but the high CVSS score of 8.2 indicates a serious risk if the flaw can be exploited.

The vulnerable range applies to installations of IBM Aspera Faspex 5 on Linux platforms, specifically versions 5.0.0 up to and including 5.0.15.4, as the advisory only references a recommended upgrade path for Linux.

The severity rating of 8.2 reflects significant potential impact, while the EPSS score of less than 1% indicates that the vulnerability is currently rarely exploited in the wild. It is not listed in the CISA KEV catalog, suggesting no confirmed operational exploitation. The description does not state the exact exploitation method, but the session‑management nature and common web‑based exposure of such flaws imply a likely remote attack vector via session tokens or cookies, a scenario inferred from typical use of the product.