IBM Concert Software Cleartext Storage Vulnerability in Docker Builds

A vulnerability exists in IBM Concert Software versions 1.0.0 through 2.1.0, where sensitive information is stored in cleartext during recursive Docker builds. This information could be accessed by a local user.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Remediation

Users are advised to upgrade to IBM Concert Software version 2.2.0. This version can be downloaded from the Container software library section of the IBM Entitled Registry (ICR) and users should follow the appropriate installation instructions based on their deployment type.