Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-33099 EUVD-2025-27843

IBM Concert Software information disclosure

Published Sep 1, 2025 · Updated Sep 2, 2025 · Assigned by ibm

Description

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation.

Affected products

VendorProductAffectedFixed
IBM Concert Software 1.0.0 – ≤ 1.1.0 —

References