CVE-2025-33101

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-33101
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-33101.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-33101
Published
2026-02-17T20:22:03.387Z
Modified
2026-04-02T12:47:20.320354Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

IBM Concert 1.0.0 through 2.1.0 could allow an attacker to obtain sensitive information using man in the middle techniques due to improper clearing of heap memory.

References

Affected packages

Git / github.com/ibm/concert

Affected ranges

Type
GIT
Repo
https://github.com/ibm/concert
Events
Introduced
a58b5d823f3d64e1bb3e2171c3cbc684aec96252
Fixed
cb51ce3d6aa77e78394bea20b9902b60121ec6cf
Database specific 
{
    "versions": [
        {
            "introduced": "1.0.0"
        },
        {
            "fixed": "2.2.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-33101.json"