CVE-2025-36161

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 2.0.0

Description The software does not properly enable HTTP Strict-Transport-Security, which could allow a remote attacker to obtain sensitive information. An attacker could exploit this issue using man in the middle techniques to intercept and potentially compromise data transmitted between a user and the server.

Recommendations Ensure HTTP Strict-Transport-Security is properly enabled for all versions between 1.0.0 and 2.0.0.