This vulnerability allows a user with privileged access to perform unauthorized actions in IBM Concert Software versions 1.0.0 through 2.2.0 because channel communication is not properly restricted to intended endpoints. The flaw effectively lets an attacker bypass intended endpoint controls, increasing the risk of data modification, configuration changes, and other privileged actions that could affect the integrity of the system.

IBM Concert Software versions 1.0.0 to 2.2.0 are susceptible. These include the initial release 1.0.0 and all subsequent releases up to 2.2.0. The affected product is IBM Concert, a container‑oriented orchestration platform provided by IBM.

The CVSS score of 5.1 indicates moderate severity. The EPSS score of less than 1% suggests a low probability of widespread exploit. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation would require a user who already has privileged status within the system and can communicate over the affected channels; the flaw does not appear to be exploitable remotely or without existing access.