Improper Certificate Validation in IBM Concert by IBM
CVE-2025-64649

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Concert
Vendor
CVE Published:
28 August 2026

What is CVE-2025-64649?

IBM Concert versions 1.0.0 through 2.3.1 are susceptible to security threats due to improper certificate validation. This vulnerability could enable a remote attacker to execute unauthorized actions by exploiting man-in-the-middle techniques. It is crucial for users of IBM Concert to apply the recommended security updates to mitigate these risks effectively. For further details, users can refer to the vendor advisory from IBM.

Affected Version(s)

Concert 1.0.0 <= 2.3.1

References

https://www.ibm.com/support/pages/node/7285337
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.