IBM Concert 安全漏洞

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform, announced by IBM in May 2024 at the IBMThink conference in Boston, USA. IBM Concert suffers from an information disclosure vulnerability that stems from...

PT-2025-53318

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 2.1.0 Description IBM Concert versions 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds. A local user could potentially obtain this information. Recommendations...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools, related to improper cleaning of dynamic memory, allows attackers to compromise the accessibility of protected information.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to improper cleaning of dynamic memory. Exploiting this vulnerability can allow attackers to compromise the accessibility of protected information...

CVE-2025-36154: Cleartext Storage in a File or on Disk

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.

Summary Multiple vulnerabilities were addressed in IBM Concert Software version 2.2.0 Vulnerability Details CVEID:CVE-2025-36154 DESCRIPTION: IBM Concert Software stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user. CWE:CWE-313: Clearte...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the insufficient validation of requests on the server side, allowing attackers to execute SSRF attacks.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tool lies in the improper processing of output data for registration logs, allowing a violator to gain access to read and modify this data.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the improper processing of output data for registration logs. Exploiting this vulnerability can allow a remote attacker to gain access to and modify this data...

Security Bulletin: IBM Concert is vulnerable to remote code execution due to React (CVE-2025-55182)

Summary IBM Concert uses React which is vulnerable to remote code execution. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in its uncontrolled recursion, which allows attackers to gain unauthorized access to protected information.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to uncontrolled recursion. Exploiting this vulnerability could allow attackers to gain unauthorized access to protected information...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the lack of protective measures for website structures. This allows attackers to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tool lies in the improper processing of output data for registration logs, allowing attackers to impersonate other users.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tool is related to improper processing of output data for registration logs. Exploiting this vulnerability can allow attackers to impersonate other users...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools, related to the disclosure of system data by unauthorized individuals, allows attackers to gain unauthorized access to protected information.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the fact that system data can be disclosed to unauthorized individuals during the processing of HTTP headers. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the improper restriction on the visualized layers of the user interface. This allows attackers to carry out clickjacking attacks.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in improper restrictions on the visual layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

IBM Concert Encryption Issues Vulnerabilities

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from a cryptographic issue vulnerability that stems from the use of weak encryption algorithms, which can ...

CVE-2025-36149

IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim...

CVE-2025-36150

IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

EUVD-2025-198993

IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-36150

IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-36150

IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-36150 IBM Concert Information Disclosure

IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...