CVE-2025-12708

Published: Mar 25, 2026 Last Modified: Mar 25, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 6,2

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: none

Availability: none

AI Translation Available

IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user.

798

Draft

Abstraction: Base Structure: Simple

Security Scopes Affected:

Access Control Integrity Confidentiality Availability Other

Potential Impacts:

Bypass Protection Mechanism Read Application Data Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands Other

Technologies: Mobile, ICS/OT

Likelihood of Exploit: High