CVE-2026-3628: IBM Concert Software Information Disclosure
Published Oct 14, 2026
·Updated
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.
Other sources
IBM Concert allows information disclosure through exposure of schema suggestions.
— IBM
Affected Software
1 affected component
IBM Concert Software<=1.0-3.0.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Concertto a version that resolves this vulnerability.Fixed in 3.0.1.1
Event History
Oct 14, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Oct 19, 2026
CVE Published
via MITRE·05:17 PM
Data Sourced
via MITRE·05:17 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability has network attack vector, low attack complexity, and requires no privileges or user interaction. An unauthenticated remote attacker can potentially obtain information exposed through schema suggestions.
2
What is the impact of successful exploitation?
Successful exploitation can disclose information. The supplied severity vector indicates low confidentiality impact and no integrity or availability impact.
3
Which IBM Concert versions are affected?
IBM Concert versions 1.0 through 3.0.0 are affected.