IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.Referenceshttps://www.ibm.com/support/pages/node/7257006