Sensitive Information Exposure in IBM Concert Software

CVE-2025-36161

What is CVE-2025-36161?

IBM Concert versions 1.0.0 through 2.0.0 are susceptible to a vulnerability that could enable remote attackers to gain access to sensitive information. This issue arises from the inadequate enforcement of HTTP Strict-Transport-Security, allowing attackers to implement man-in-the-middle strategies and capture data that should be protected. Users are advised to apply necessary updates available through vendor advisories to mitigate this risk.

References