PT-2026-28119 · Ibm · Concerto

Published 2026-03-25 · Updated 2026-03-25 · CVE-2025-64648

Mitre

CVSS v3.1

5.9

Medium

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

IBM Concert 1.0.0 through 2.2.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2025-64648

Affected Products

Concerto

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-64648 · Security Note
• https://ibm.com/support/pages/node/7267105 · Patch, Vendor Advisory