Threats tagged 'ghsa-hghw-5993-52m4'

IBM Concert versions 1.0 through 3.0.1.1 contain a command injection vulnerability where crafted input is incorporated into operating system commands without proper validation. This flaw allows remote attackers to execute arbitrary commands with the privileges of the affected service. The vulnerability is critical with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.