Information Disclosure in IBM Concert Versions 1.0 to 3.0.0

CVE-2026-3628

What is CVE-2026-3628?

IBM Concert versions 1.0 through 3.0.0 are susceptible to a vulnerability that allows unauthorized information disclosure through the exposure of internal schema suggestions. This could potentially enable malicious actors to infer sensitive information from the application, thereby posing a risk to the integrity and confidentiality of the data being handled. Users of affected versions are advised to apply the relevant security patches and mitigate potential exploitation.

References