CVE-2025-36158

IBM Concert Information Disclosure PUBLISHED

Description (CNA)

IBM Concert 1.0.0 through 2.0.0 could allow a local user with specific permission to obtain sensitive information from files due to uncontrolled recursive directory copying.

Affected (CNA)

Vendor / product	Versions
IBM / Concert	affected 1.0.0 through 2.0.0

CWE

CWE-674

References

https://www.ibm.com/support/pages/node/7252019

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.