The vulnerability arises from improper clearing of heap memory in IBM Concert Software versions 1.0 through 3.0.0, allowing an attacker to inspect heap contents and potentially disclose sensitive data. This weakness is classified as CWE-244. The primary security impact is a loss of confidentiality, as private information may be accessed through heap inspection.

Affected products are IBM Concert Software releases 1.0, 2.x, and 3.0.0. IBM recommends upgrading to version 3.0.1.1 to resolve the issue. The affected deployments include any environment that runs these vulnerable releases.

The CVSS score of 4.7 indicates a moderate severity assessment. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog, implying a lower current exploitation probability. The attack vector is not explicitly documented; based on the nature of heap inspection, it is inferred that exploitation may require local or privileged access to the affected system or the ability to initiate heap debugging processes.