CVE-2026-4405
Received Received - Intake

Web Page Cache Exposure in IBM Concert

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: IBM Corporation

Description
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-4405
EUVD
EUVD-2026-104530

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
IBM Concert 1.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-525 The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM Concert 1.0 through 3.0.0 stores web page cache locally on the system. This cache can be accessed by other users on the same system, potentially exposing sensitive information stored in cached pages.

Detection Guidance

This vulnerability involves locally stored web page cache that may be accessible to other users. To detect it, check browser cache directories for IBM Concert files. On Windows, inspect %LocalAppData%\IBM\Concert\Cache. On Linux/macOS, check ~/.cache/ibm/concert or similar paths. Use commands like 'dir /s %LocalAppData%\IBM\Concert\Cache' (Windows) or 'find ~/.cache -name '*concert*' -type f' (Linux/macOS) to search for cached files.

Impact Analysis

If another user accesses the system, they may read cached web pages containing your data, leading to unauthorized information disclosure. This could affect privacy or expose confidential details depending on the cached content.

Compliance Impact

This vulnerability may violate data protection requirements under GDPR or HIPAA by allowing unauthorized access to personal or health information stored in cached pages. Organizations must address this to maintain compliance.

Mitigation Strategies

Clear the web page cache on systems running IBM Concert 1.0 through 3.0.0 to prevent unauthorized local access. Ensure cache storage is restricted to authorized users only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-4405. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart