CVE-2025-36161
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information due to the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this to obtain sensitive information using man-in-the-middle techniques.
Risk Assessment
Lack of enforced HSTS facilitates man-in-the-middle attacks and may lead to disclosure of sensitive information. The risk affects IBM Concert deployments in vulnerable versions.
Recommendation
Update IBM Concert to a version later than 2.0.0 or apply the vendor fix. Ensure the HTTP Strict-Transport-Security header is properly enabled.
Other vulnerabilities in IBM Concert
See all- CVE-2025-33015High
IBM Concert versions 1.0.0 through 2.1.0 is vulnerable to malicious file upload due to lack of content validation for files uploaded to the web interface. An attacker could exploit this to upload harmful files.
- CVE-2026-6928Critical
IBM Concert versions 1.0.0 through 3.0.0 references or accesses memory after it has been freed (use-after-free). An attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.
- CVE-2026-6730Critical
IBM Concert versions 1.0.0 through 3.0.0 is vulnerable to a buffer overflow caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
- CVE-2026-6721Critical
IBM Concert versions 1.0.0 through 3.0.0 allows an unauthenticated remote attacker to supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution. Successful exploitation allows remote code execution with the privileges of the affected application.
- CVE-2026-17472Critical
IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions.
- CVE-2026-3627Critical
IBM Concert versions 1.0.0 through 2.3.1 are vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, potentially allowing viewing, adding, modifying, or deleting information in the back-end database.
- CVE-2026-6719High
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms. This could allow an attacker to decrypt highly sensitive information.
- CVE-2026-4413Medium
IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI, altering intended functionality and potentially leading to credential disclosure within a trusted session.
- CVE-2026-4405Medium
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally, which can be read by another user on the system.
- CVE-2026-3628Medium
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.
Original NVD description (English source)
IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS