CVE-2025-13044

—

CVSS 3.1

6.2 medium

EPSS

<1%p4

Published

Apr 7, 2026 (Apr 7, 2026)

Modified

Jul 24, 2026

Description

IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.

Vendors: ibm
Products: concert
Weakness: CWE-340
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.