Memory Exposure Vulnerability in IBM Concert Software
CVE-2025-1759

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Concert Software
Vendor
CVE Published:
18 August 2025

What is CVE-2025-1759?

A vulnerability in IBM Concert Software, versions 1.0.0 to 1.1.0, allows remote attackers to access sensitive data from allocated memory due to inadequate clearing of heap memory. This oversight can potentially expose confidential information, compromising the security of affected systems. It is crucial for users to apply the latest patches to mitigate this risk and protect their sensitive data.

Affected Version(s)

Concert Software 1.0.0 <= 1.1.0

References

https://www.ibm.com/support/pages/node/7242354
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.