PT-2026-28115 · Ibm · Ibm Concert

CVE-2025-36438 · Published 2026-03-25 · Updated 2026-03-25

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 2.2.0

Description IBM Concert versions 1.0.0 through 2.2.0 may allow a privileged user to perform unauthorized actions because of improper restriction of channel communication to intended endpoints.

Recommendations Update to a version later than 2.2.0.

Fix

Weakness Enumeration

CWE-923

Related Identifiers

CVE-2025-36438

Affected Products

Ibm Concert

References · 4

• https://osv.dev/vulnerability/CVE-2025-36438 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36438 · Security Note
• https://twitter.com/CVEnew/status/2036911773799112919 · Twitter Post
• https://ibm.com/support/pages/node/7267105 · Vendor Advisory, Patch