CVE-2025-33084

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-33084
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-33084.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-33084
Published
2025-09-01T15:15:34.833Z
Modified
2026-07-10T12:43:49.042190Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

References

Affected packages

Git / github.com/ibm/concert

Affected ranges

Type
GIT
Repo
https://github.com/ibm/concert
Events
Introduced
426f6aa6046da617b10805b6640f52450316ba2e
Fixed
74a18eb409293230afa551c5301c31ed1cff0336
Database specific 
{
    "cpe": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "fixed": "2.0.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

1.*
1.0.0
v1.*
v1.0.1
v1.0.2
v1.0.2.1
v1.0.2.2
v1.0.3
v1.0.4
v1.0.4.1
v1.0.5.1
v1.0.5.2
v1.0.5.4
v1.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-33084.json"