Skip to content
OpenAdvisories
High WID-SEC-2025-2424 15 CVEs

IBM Rational Team Concert: Mehrere Schwachstellen

Published Oct 27, 2025 · Updated Oct 28, 2025 · Revision 2 · de-DE

Vendor: IBM Product: Rational Team Concert Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Rational Team Concert ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Eingaben oder Protokolle zu manipulieren, die Authentifizierung zu umgehen, beliebigen Code auszuführen, Cross-Site-Scripting durchzuführen, sensible Informationen offenzulegen oder offene Weiterleitungen auszulösen.

Product

IBM Rational Team Concert ist ein Kollaborationstool zur Software Entwicklung.

Vulnerabilities 15

  • Critical 9.4
    CVE-2025-7783 Public exploit

    Usage of unsafe random function in form-data for choosing boundary

    Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

    katib-suggestion-hyperopt katib-earlystopping katib-suggestion-pbt-enas katib-suggestion-skopt-enas Debian Ubuntu Azure Linux Wolfi npm
  • Critical 9.1
    CVE-2025-9288

    Missing type checks leading to hash rewind and passing on crafted data

    Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.

    opensearch-dashboards-3 opensearch-dashboards-3-dashboards-reporting opensearch-dashboards-3-dashboards-observability opensearch-dashboards-3-alerting-dashboards-plugin Debian Ubuntu Azure Linux Wolfi npm
  • High 8.5
    CVE-2025-53547 Public exploit

    Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

    Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execution when dependencies are updated. Fields in a Chart.yaml file, that are carri…

    helm helm zot kots Azure Linux Alpine Wolfi Go
  • High 8.1
    CVE-2024-33531

    cdbattags lua-resty-jwt 0.2.3 allows attackers to bypass all JWT-parsing signature checks by crafting a JWT with an enc…

  • High 7.7
    CVE-2025-48060 Public exploit

    AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

    jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of …

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2025-22874

    Usage of ExtKeyUsageAny disables policy validation in crypto/x509

    Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

    Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 7.5
    CVE-2025-7338 Public exploit

    Multer vulnerable to Denial of Service via unhandled exception from malformed request

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload requ…

    expressjs multer multer npm
  • High 7.0
    CVE-2025-45768

    pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length …

    pyjwt pyjwt Debian PyPI
  • Medium 6.2
    CVE-2025-36083

    Multiple Vulnerabilities in IBM Concert Software.

    IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.

    IBM Concert Software
  • Medium 5.4
    CVE-2025-36085

    Multiple Vulnerabilities in IBM Concert Software.

    IBM Concert 1.0.0 through 2.0.0 Software is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

    IBM Concert
  • Medium 5.3
    CVE-2025-36081

    Multiple Vulnerabilities in IBM Concert Software.

    IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.

    IBM Concert Software
  • Medium 5.3
    CVE-2025-50181

    urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

    urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are …

    urllib3 urllib3 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi PyPI
  • Medium 5.3
    CVE-2025-50182

    urllib3 does not control redirects in browsers and Node.js

    urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling…

    urllib3 urllib3 katib-earlystopping kubeflow-pipelines-apiserver Debian Wolfi PyPI
  • Medium 5.0
    CVE-2025-32379

    XSS at ctx.redirect() function in Koajs

    Koa is expressive middleware for Node.js using ES2017 async functions. In koa < 2.16.1 and < 3.0.0-alpha.5, passing untrusted user input to ctx.redirect() even after sanitizing it, may execute javascript code on the user who use the app. This issue is patched…

    koajs koa koa npm
  • Medium 4.3
    CVE-2024-23337

    jq has signed integer overflow in jv.c:jvp_array_write

    jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1…

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-36531, EUVD-2025-36533, EUVD-2025-36532

  2. #1

    Initiale Fassung

References