CVE-2025-64647: medium-severity vulnerability in IBM Concert
Multiple Vulnerabilities in IBM Concert Software
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
IBM Concert versions 1.0.0 to 2.2.0 use weak encryption methods that could let attackers decrypt sensitive data. This puts confidential information at risk of unauthorized access.
The application employs cryptographically weak algorithms for protecting sensitive data, enabling an attacker with access to encrypted communications or stored data to potentially recover plaintext through cryptanalysis or brute-force methods. The vulnerability affects versions 1.0.0 through 2.2.0 and may compromise confidentiality of highly sensitive information.
In the same product, most dangerous first.