CVE-2024-43177 MEDIUM

CVE-2024-43177: IBM Concert improper certificate validation

Vendor Ibm
Product Concert
Weakness CWE-295
Published October 22, 2024
Last update October 22, 2024
View on NVD All CVEs

CVSS base score

5.9/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

Key dates

02Disclosure timeline

October 22, 2024 CVE published
October 22, 2024 Record updated