VULNERABILITY INTELLIGENCE

CVE-2025-36154

CVSS score6.2 MEDIUM

EPSS probability0.10%

CISA KEVNot currently listed

Published2025-12-24

Last modified2026-10-07

Description

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user.