6.2
Medium
CVE-2025-13044 IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite…
Description
IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Concert 1.0 | 1.0.0 → 2.2.0 | No fix stated |
Other CVEs of Concert
The 64 CVEs of Concert →
CVE-2026-6715
Multiple Vulnerabilities in IBM Concert Software
9.8
Critical
CVE-2026-15266
Multiple Vulnerabilities in IBM Concert Software
9.8
Critical
CVE-2026-1501
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation
3.7
Low
CVE-2026-1510
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection
4.7
Medium