CyberRota Analysis
AI-GeneratedIBM Concert versions 1.0.0 through 3.0.0 are vulnerable to directory traversal attacks, allowing remote attackers to access arbitrary files by sending specially crafted URL requests containing "dot dot" sequences. This vulnerability could lead to unauthorized exposure of sensitive information on the system. Organizations using affected versions should prioritize patching to mitigate potential data breaches.
CVE
CVE-2026-6925
Severity
MEDIUM
CVSS
5.3
EPSS
N/A
Original NVD Description
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)