CVE-2025-12708 IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user

Description

IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user.

Affected products and versions

Product	Affected versions	Fixed in
Concert 1.0	1.0.0 → 2.2.0	No fix stated

Other CVEs of Concert

The 64 CVEs of Concert →

CVE-2026-6715 Multiple Vulnerabilities in IBM Concert Software 9.8 Critical CVE-2026-15266 Multiple Vulnerabilities in IBM Concert Software 9.8 Critical CVE-2026-1501 IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation 3.7 Low CVE-2026-1510 IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection 4.7 Medium