CVE-2026-6544

Published: Sep 24, 2026Modified: Sep 24, 2026

6.2

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.5 / Impact: 3.6

Source: psirt@us.ibm.com (Secondary)

Description

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (1)

https://www.ibm.com/support/pages/node/7288830

Source: psirt@us.ibm.com

Timeline

No history available yet.