CVE-2025-36154
published 2025-12-24CVE-2025-36154: IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user.
medium6.2CVSS 3.1
AVLACLPRNUINSUCHINAN
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | concert | >= 1.0.0 < 2.2.0 | 2.2.0 |
| ibm | concert | 1.0.0 – 2.1.0 | — |