CVE-2024-43173 LOW

CVE-2024-43173: IBM Concert information disclosure

Vendor Ibm
Product Concert
Weakness CWE-1275
Published October 22, 2024
Last update October 22, 2024
View on NVD All CVEs

CVSS base score

3.7/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

Key dates

02Disclosure timeline

October 22, 2024 CVE published
October 22, 2024 Record updated