Unrated severityOSV Advisory· Published Dec 24, 2025· Updated Dec 24, 2025
IBM Concert Software Cleartext Storage in a File or on Disk.
CVE-2025-36154
Description
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.ibm.com/support/pages/node/7255549mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.