Cryptographic Weakness in IBM Concert Software Affects Sensitive Data Security
CVE-2025-33102

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Concert Software
Vendor
CVE Published:
1 September 2025

What is CVE-2025-33102?

IBM Concert Software versions 1.0.0 and 1.1.0 exhibit weaknesses in cryptographic algorithms that are less robust than anticipated. These vulnerabilities could enable attackers to decrypt sensitive information, potentially exposing critical data to unauthorized access. It is crucial for users of this software to assess their risk and apply necessary patches to safeguard their information.

Affected Version(s)

Concert Software 1.0.0 <= 1.1.0

References

https://www.ibm.com/support/pages/node/7243699
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.