IBM Concert Sensitive Information Log File Exposure Vulnerability

A vulnerability exists in IBM Concert Software versions 1.0.0 through 2.1.0, where potentially sensitive information is stored in log files accessible to local users. This could lead to unauthorized disclosure of sensitive data.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of sensitive information.

Remediation

Users are advised to upgrade to IBM Concert Software version 2.2.0. This version can be downloaded from the Container software library section of the IBM Entitled Registry (ICR) and users should follow the provided installation instructions based on their deployment type.