7.4
Élevée
CVE-2025-33088 IBM Concert 1.0.0 through 2.1.0 could allow a local user with specific knowledge about the system's architecture to…
Description
IBM Concert 1.0.0 through 2.1.0 could allow a local user with specific knowledge about the system's architecture to escalate their privileges due to incorrect file permissions for critical resources.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Concert 1.0 | 1.0.0 → 2.1.0 | Pas de correctif indiqué |
Autres CVE de Concert
Les 62 CVE de Concert →
CVE-2026-1501
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation
3.7
Faible
CVE-2026-1510
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection
4.7
Moyenne
CVE-2026-3303
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out…
3.7
Faible
CVE-2026-3628
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions
5.3
Moyenne