IBM Concert Software Missing Function Level Access Control Vulnerability
Vulnerability
A vulnerability in IBM Concert Software versions 1.0.0 through 2.2.0 allows local users to access sensitive information due to inadequate function level access control. This flaw could be exploited to obtain information that should be restricted.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive information.
Remediation
Users are advised to upgrade to IBM Concert Software version 2.3.1. This version can be downloaded from the Container software library section of the IBM Entitled Registry (ICR) and installation instructions are available on the IBM Concert documentation site.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
