Medium · 6.2 CVE-2025-36154 EUVD-2025-205352GHSA-r8pj-6rqm-3whh

IBM Concert Software Cleartext Storage in a File or on Disk.

Published Dec 24, 2025 · Updated Dec 24, 2025 · Assigned by ibm

Description

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user.

Vendor	Product	Affected	Fixed
IBM	Concert	1.0.0 – ≤ 2.1.0	—