ibmCVE-2026-6544
IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack...
Medium6.2CVE-2026-6544 · Published Sep 24, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Concert Vendor | >= 1.0.0, <= 3.0.0 | No fix yet |
Details and references
IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- no source yet
- Weakness
- CWE-552