PT-2026-28115 · Ibm · Ibm Concert

CVE-2025-36438 · Publicado 2026-03-25 · Atualizado 2026-03-25

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 2.2.0

Description IBM Concert versions 1.0.0 through 2.2.0 may allow a privileged user to perform unauthorized actions because of improper restriction of channel communication to intended endpoints.

Recommendations Update to a version later than 2.2.0.

Correção

Enumeração de Fraquezas

CWE-923

Identificadores relacionados

CVE-2025-36438

Produtos afetados

Ibm Concert

Referências · 4

• https://twitter.com/CVEnew/status/2036911773799112919 · Publicação no Twitter
• https://ibm.com/support/pages/node/7267105 · Aviso do Fabricante, Correção
• https://osv.dev/vulnerability/CVE-2025-36438 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-36438 · Nota de Segurança