CVEvulnerability
CVE-2024-52359
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-11-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-286
Description
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.
Affected configurations
• ibm concert 1.0.0
• ibm concert 1.0.1
• ibm concert 1.0.2
• ibm concert 1.0.2.1
Related
Weakness · CWE (1)
- CWE-286 Incorrect User Management weakness
References
- https://www.ibm.com/support/pages/node/7176346 Vendor Advisory