Multiple Vulnerabilities in IBM Concert Software Could Allow for Remote Code Execution

Multiple critical and high-severity vulnerabilities were identified in IBM Concert Software — including OS command injection, deserialization of untrusted data, code injection, missing serialization control, use-after-free, and buffer overflow issues (several CVEs listed) — which could allow remote or arbitrary code execution with the privileges of the affected application; IBM has remediated these issues and published an advisory with full details.