CVE-2025-36438

published 2026-03-25

CVE-2025-36438: IBM Concert 1.0.0 through 2.2.0 could allow a privileged user to perform unauthorized actions due to improper restriction of channel communication to intended…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I H A N

IBM Concert 1.0.0 through 2.2.0 could allow a privileged user to perform unauthorized actions due to improper restriction of channel communication to intended endpoints.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	concert	1.0.0 – 2.2.0	—

CWE-923