CVE-2025-36161 - IBM Concert Software Information Disclosure

CVE ID : CVE-2025-36161 Published : Nov. 20, 2025, 3:26 p.m. | 59 minutes ago Description : IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...