7.4
High
CVE-2025-33088 IBM Concert 1.0.0 through 2.1.0 could allow a local user with specific knowledge about the system's architecture to…
Description
IBM Concert 1.0.0 through 2.1.0 could allow a local user with specific knowledge about the system's architecture to escalate their privileges due to incorrect file permissions for critical resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Concert 1.0 | 1.0.0 → 2.1.0 | No fix stated |
Other CVEs of Concert
The 64 CVEs of Concert →
CVE-2026-6715
Multiple Vulnerabilities in IBM Concert Software
9.8
Critical
CVE-2026-15266
Multiple Vulnerabilities in IBM Concert Software
9.8
Critical
CVE-2026-1501
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation
3.7
Low
CVE-2026-1510
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection
4.7
Medium