PT-2025-47632 · Ibm · Ibm Concert

CVE-2025-36160 · Published 2025-11-19 · Updated 2025-11-21

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 2.0.0

Description IBM Concert versions 1.0.0 through 2.0.0 may reveal sensitive server information through HTTP response headers. This information could potentially assist in launching further attacks against the system.

Recommendations Update IBM Concert to a version later than 2.0.0.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2025-15272

CVE-2025-36160

Affected Products

Ibm Concert

References · 8

• https://osv.dev/vulnerability/CVE-2025-36160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36160 · Security Note
• https://bdu.fstec.ru/vul/2025-15272 · Security Note
• https://ibm.com/support/pages/node/7252019 · Patch, Vendor Advisory
• https://t.me/cveNotify/143641 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1991711719031185879 · Twitter Post
• https://t.me/CVEtracker/37876 · Telegram Post
• https://twitter.com/CVEnew/status/1991620382252503425 · Twitter Post