BaselineWatch
Desk

CVE-2025-36159

5.5 medium SSVC exploitation: none Analyzed

IBM Concert 1.0.0 through 2.0.0 could allow a local user to forge log files to impersonate other users or hide their identity due to improper neutralization of output.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 5.5 · ibmNVD modified 2026-10-18 20:10

Affected (CPE criteria) 1

  • cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*

References 1