← Back

CVE-2026-6327

nvd nist
Published: Sep 23, 2026Modified: Sep 28, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

Affected (1)

Products: Ibm: Concert
Ibm
1 product
Concert
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Concert
1.0.0 ≤ version ≤ 3.0.0
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-117
Improper Output Neutralization for Logs
The product does not neutralize or incorrectly neutralizes output that is written to logs.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.