CVE-2025-36083
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.
Risk Assessment
A local user could read sensitive data remaining in heap memory, potentially leading to information disclosure.
Recommendation
Update IBM Concert Software to a version later than 2.0.0.
Other vulnerabilities in IBM Concert Software
See all- CVE-2025-36081Medium
IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.
- CVE-2025-1761Medium
IBM Concert Software versions 1.0.0 through 1.1.0 may allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
Original NVD description (English source)
IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS