CVE-2026-1501
Full vulnerability record from the local CVENow database.
Description
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.
Severity
LOW
CVSS score
3.7
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-10-19 18:17:06.703000
Last modified
2026-10-19 20:55:02.217000
View original CVE JSON
{
"id": "CVE-2026-1501",
"sourceIdentifier": "[email protected]",
"published": "2026-10-19T18:17:06.703",
"lastModified": "2026-10-19T20:55:02.217",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "IBM",
"product": "Concert",
"defaultStatus": "unaffected",
"versions": [
{
"version": "1.0.0",
"lessThanOrEqual": "3.0.0",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 2.5
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-19T17:53:34.866315Z",
"id": "CVE-2026-1501",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-295"
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7292374",
"source": "[email protected]"
}
]
}