CVE-2026-4405: IBM Concert Software Use of Web Browser Cache Containing Sensitive Information
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.
Other sources
IBM Concert allows web page cache to be stored locally which can be read by another user on the system.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Concert Softwareto a version that resolves this vulnerability.Fixed in 3.0.1.1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of IBM Concert versions 1.0 through 3.0.0 are exposed when another user can access the same system and read locally stored browser cache data.
What does an attacker need to exploit it?
An attacker needs local access to the system or access as another user on that system. No privileges or user interaction are required according to the supplied vector.
What is the impact of successful exploitation?
Another local user may be able to read sensitive information retained in the web browser cache. The provided severity vector indicates a confidentiality impact only, with no stated integrity or availability impact.