Advisoriesby IbisIBMCVE-2026-6544
IBM Concert: exposed files
No fix yet
IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Concert Product | >= 1.0.0, <= 3.0.0 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-552