IBM Concert Software versions 1.0 through 3.0.0 allows data rendered in web pages to be cached locally, enabling other local users on the same machine to read the cached pages and retrieve sensitive information. This flaw results in local information disclosure and is classified as CWE-525. The vulnerability does not provide remote execution or privilege escalation; its impact is limited to the local account that owns the cache.

IBM Concert Software, spanning versions from 1.0 to 3.0.0, is vulnerable when executed on any system where user accounts share the same local machine environment.

The CVSS score of 4.0 indicates low severity, and EPSS information is not available, while the vulnerability is not currently listed in the CISA KEV catalog. The flaw is exploitable by a local user who has access to the system, reading cached pages that contain confidential data. Because the attack vector requires local user privileges, the risk is confined to shared environments but still poses significant exposure of sensitive information.