IBM Concert Software Heap Memory Vulnerability Allowing Information Disclosure

A vulnerability exists in IBM Concert Software versions 1.0.0 through 2.0.0, allowing local users to access sensitive information from buffers. This issue arises from improper management of heap memory, where data is not adequately cleared before the memory is released.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from memory buffers.

Remediation

Users are advised to upgrade to IBM Concert Software version 2.1.0. This version can be downloaded from the Container software library section of the IBM Entitled Registry (ICR) and installed following the provided instructions for the type of deployment.