Heap Memory Exposure in IBM Concert Software
CVE-2025-1761

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Concert Software
Vendor
CVE Published:
8 September 2025

What is CVE-2025-1761?

IBM Concert Software versions 1.0.0 through 1.1.0 contain a vulnerability that can enable remote attackers to access sensitive information from allocated memory. This issue arises from improper handling of heap memory, which could potentially lead to data leakage and compromise the confidentiality of user data. It is crucial for users of these versions to apply patches provided by IBM to mitigate this risk.

Affected Version(s)

Concert Software 1.0.0 <= 1.1.0

References

https://www.ibm.com/support/pages/node/7244230
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.