IBM Concert Sensitive Information Disclosure Vulnerability

A vulnerability in IBM Concert versions 1.0.0, 1.0.1, and 1.0.2 allows for sensitive information disclosure through specially crafted API calls. This issue arises from incompatible policies that expose sensitive data.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information.

Remediation

Users are advised to upgrade to IBM Concert version 1.0.2.1, available through the IBM Entitled Registry. After upgrading, it is recommended to rotate any end user or application secrets used within Concert.