CVE Catalog
CVE-2025-13044
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
IBM Concert versions 1.0.0 through 2.2.0 creates temporary files with predictable names. A local user can exploit a symlink attack to overwrite arbitrary files.
Risk Assessment
A local attacker can overwrite critical system or configuration files, potentially leading to privilege escalation or system instability.
Recommendation
Update IBM Concert to version 2.2.1 or later, which fixes this vulnerability.
Original NVD description (English source)
IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.