Weak Cryptographic Algorithms in IBM Concert Products
CVE-2025-36084

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Concert
Vendor
CVE Published:
22 September 2026

What is CVE-2025-36084?

IBM Concert versions 1.0.0 through 3.0.0 utilize cryptographic algorithms that do not meet expected security standards. This flaw enables potential attackers to decrypt sensitive information, posing a significant risk to data integrity and confidentiality. Users are advised to review their implementations and apply necessary security measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

Concert 1.0.0 <= 3.0.0

References

https://www.ibm.com/support/pages/node/7288830
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.