Web Page Cache Vulnerability in IBM Concert Software
CVE-2026-4405

4MEDIUM

Key Information:

Vendor

IBM
Status
Concert
Vendor
CVE Published:
19 October 2026

What is CVE-2026-4405?

IBM Concert versions 1.0 through 3.0.0 are susceptible to a vulnerability that permits the local storage of web page cache. This cache can potentially be accessed by other users on the same system, leading to unauthorized information exposure. It is crucial for users to implement the latest patches and follow best security practices to safeguard sensitive data.

Affected Version(s)

Concert 1.0.0 <= 3.0.0

References

https://www.ibm.com/support/pages/node/7292374
vendor-advisorypatch

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.