CVE-2025-36159: IBM Concert Improper Log Neutralization
IBM Concert 1.0.0 through 2.0.0 could allow a local user to forge log files to impersonate other users or hide their identity due to improper neutralization of output.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Concert Softwareto a version that resolves this vulnerability.Fixed in 2.1.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36159?
CVE-2025-36159 is classified as a medium severity vulnerability.
How do I fix CVE-2025-36159?
To fix CVE-2025-36159, upgrade to a version of IBM Concert Software that is not within the affected range of 1.0.0-2.0.0.
What are the potential impacts of CVE-2025-36159?
CVE-2025-36159 could allow local users to forge log files, impersonating other users or concealing their own identity.
Who is affected by CVE-2025-36159?
Users of IBM Concert Software versions 1.0.0 through 2.0.0 are affected by CVE-2025-36159.
Is CVE-2025-36159 exploitable remotely?
CVE-2025-36159 is not remotely exploitable as it requires local user access to exploit.