CVE-2026-4405 IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system

Description

IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

Affected products and versions

Product	Affected versions	Fixed in
Concert 1.0	1.0.0 → 3.0.0	No fix stated

Other CVEs of Concert

The 62 CVEs of Concert →

CVE-2026-1501 IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation 3.7 Low CVE-2026-1510 IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection 4.7 Medium CVE-2026-3303 IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out… 3.7 Low CVE-2026-3628 IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions 5.3 Medium