{"id":"CVE-2026-3628","kind":"vulnerability","aliases":["CVE-2026-3628"],"related":[],"title":"IBM Concert: schema suggestions leak information to unauthorized users","description":"IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.","summary":"IBM Concert versions 1.0 through 3.0.0 expose schema suggestions in a way that discloses information. An attacker who can reach the product can read data the vendor did not intend to show.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm-concert","self-hosted","vendor"],"not_affected_if":["fixed-version","not-ibm-concert"],"how_to_check":"- Check the installed IBM Concert version against the affected range `1.0` through `3.0.0`.\n- unknown","fix":"- Move IBM Concert to a version newer than `3.0.0`, as listed in the IBM advisory.\n- unknown","status":"open","published_at":"2026-10-19T18:17:07+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","triaged_at":"2026-10-25T04:24:58+00:00","updated_at":"2026-10-25T04:24:58+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-10-25T04:24:58Z","model":"claude-haiku-5-5","output":{"fix":"- Move IBM Concert to a version newer than `3.0.0`, as listed in the IBM advisory.\n- unknown","reach":"unknown","title":"IBM Concert: schema suggestions leak information to unauthorized users","impact":"low","summary":"IBM Concert versions 1.0 through 3.0.0 expose schema suggestions in a way that discloses information. An attacker who can reach the product can read data the vendor did not intend to show.","category":"vendor","nicknames":[],"who_cares":["ibm-concert","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Unauthorized users read schema suggestion data they should not see.","analyst_note":"Check the IBM security bulletin for CVE-2026-3628 for the fixed version, required access and exact data exposed; the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-3628 gives only the description.","how_to_check":"- Check the installed IBM Concert version against the affected range `1.0` through `3.0.0`.\n- unknown","needs_analyst":true,"not_affected_if":["not-ibm-concert","fixed-version"],"who_is_affected":"IBM Concert deployments in the affected version range may expose schema suggestions. The sources do not say which configurations or roles are required to reach the data, so the exact exposure is unknown. Teams not running IBM Concert in this range can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000592,"input_tokens":3255,"output_tokens":532,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-3628':12A,15A '1.0':26B,57C '3.0.0':28B,59C 'allow':60C 'attack':39B 'concert':2A,18B,24B,56C 'cve':10A,13A 'data':47B 'disclos':36B 'disclosur':62C 'expos':29B 'exposur':64C 'host':21B 'ibm':1A,17B,23B,55C 'ibm-concert':16B 'inform':6A,37B,61C 'intend':52B 'leak':5A 'product':44B 'reach':42B 'read':46B 'schema':3A,30B,66C 'self':20B 'self-host':19B 'show':54B 'suggest':4A,31B,67C 'unauthor':8A 'user':9A 'vendor':22B,49B 'version':25B 'way':34B","nicknames":[],"mitigations":[],"who_affected":"IBM Concert deployments in the affected version range may expose schema suggestions. The sources do not say which configurations or roles are required to reach the data, so the exact exposure is unknown. Teams not running IBM Concert in this range can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T18:17:07+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-3628","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3628","severity":null,"published_at":"2026-10-19T18:17:07+00:00","modified_at":"2026-10-22T21:17:18+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}