Executive brief
IBM Concert, a tool used for managing and optimizing application operations, is vulnerable to a flaw in how it handles temporary files. A local attacker can exploit this to overwrite critical system or application files, potentially leading to data loss or system instability. This occurs because the software uses predictable names for temporary files, allowing an attacker to redirect file operations to a target of their choice.
Technical details
IBM Concert (versions 1.0.0 through 2.2.0) is vulnerable to a symlink attack due to the generation of predictable temporary file names (CWE-340). A local attacker can create a symbolic link at the expected temporary file location that points to a sensitive file on the system. When the application attempts to write to the temporary file, it follows the link and overwrites the target file with the application's data. This vulnerability requires local access but no specific privileges (PR:N). The issue is addressed in IBM Concert version 2.3.1.
Affected products
- IBM Concert 1.0.0 through 2.2.0
Timeline
- 2026-04-06: disclosed: Initial disclosure by IBM
- 2026-04-07: advisory: NVD publication date