CVE-2025-64649
published 2026-08-28CVE-2025-64649: IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate…
PriorityP432medium5.9CVSS 3.1
AVNACHPRNUINSUCNIHAN
EPSS
0.17%
5.8th percentile
IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | concert | 1.0.0 – 2.3.1 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Concert up to 2.3.1 certificate validation
vuldb·2026-08-29·CVSS 5.9
CVE-2025-64649 [MEDIUM] IBM Concert up to 2.3.1 certificate validation
A vulnerability was found in IBM Concert up to 2.3.1. It has been rated as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper certificate validation.
This vulnerability is referenced as CVE-2025-64649. Remote exploitation of the attack is possible. No exploit is available.
GHSA
IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation.
ghsa_unreviewed·2026-08-29
CVE-2025-64649 [MEDIUM] CWE-295 IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation.
IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-28
Published