CVE-2025-33101

IBM Concert 1.0.0 through 2.1.0 could allow an attacker to obtain sensitive information using man in the middle techniques due to improper clearing of heap memory.

Score

CVSS 3.1 5.9 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2026-02-17

Last modified

2026-03-06

Weaknesses

CWE-244

Affected products

• Concert (Ibm)

References

• https://www.ibm.com/support/pages/node/7260162