CVE-2025-64645: Multiple Vulnerabilities in IBM Concert Software.
IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbolic link.
Other sources
IBM Concert Software could allow a local user to escalate their privileges due to a race condition of a symbolic link.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Concert Softwareto a version that resolves this vulnerability.Fixed in 2.2.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64645?
CVE-2025-64645 has a moderate severity level as it allows local users to escalate privileges.
How do I fix CVE-2025-64645?
To mitigate CVE-2025-64645, upgrade IBM Concert Software to a version beyond 2.1.0.
What versions of IBM Concert Software are affected by CVE-2025-64645?
IBM Concert Software versions from 1.0.0 to 2.1.0 are vulnerable to CVE-2025-64645.
Who is impacted by CVE-2025-64645?
Local users of IBM Concert Software could be impacted by the privilege escalation in CVE-2025-64645.
Is CVE-2025-64645 a remote exploit?
No, CVE-2025-64645 is not a remote exploit as it requires local access to the system.