Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-07 | 2 | Disclosure2 |
| 2026-04-20 | 1 | General1 |
CVE-2025-13044 IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. https://www.cve.org/CVERecord?id=CVE-2025-13044
Post summary
The CVE details a predictability issue with temporary files in IBM Concert that permits local users to perform a symlink attack and overwrite arbitrary files; no exploitation, patch, or PoC information is included.
⚡ New CVE Alert: CVE-2025-13044 📊 Severity: 6.2 🚨 Risk Level: Medium 🧩 Affects: Ibm Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-13044 #CVE-2025-13044 #CVE #Medium #Ibm #CyberSecurity #InfoSec https://t.co/YPhqxRRZUb
Post summary
This post announces the new CVE-2025-13044, notes its medium severity, and provides an NVD link.
CVE-2025-13044 Arbitrary File Overwrite via Symlink Attack in IBM Concert 1.0.0-2.2.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-13044
Post summary
The linked page lists CVE-2025-13044 as an arbitrary file overwrite via symlink attack affecting IBM Concert 1.0.0-2.2.0, with no PoC, exploit code, active exploitation, or patch details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | concert | - | - | - |