CVE-2025-33081 IBM Concert 1.0.0 through 2.1.0 stores potentially sensitive information in log files that could be read by a local user

Description

IBM Concert 1.0.0 through 2.1.0 stores potentially sensitive information in log files that could be read by a local user.

Affected products and versions

Product	Affected versions	Fixed in
Concert 1.0	1.0.0 → 2.1.0	No fix stated

Other CVEs of Concert

The 62 CVEs of Concert →

CVE-2026-1501 IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation 3.7 Low CVE-2026-1510 IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection 4.7 Medium CVE-2026-3303 IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out… 3.7 Low CVE-2026-3628 IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions 5.3 Medium