CVEvulnerability
CVE-2024-52367
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-01-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-497
Description
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could disclose sensitive system information to an unauthorized actor that could be used in further attacks against the system.
Affected configurations
• ibm concert 1.0.0
• ibm concert 1.0.1
• ibm concert 1.0.2
• ibm concert 1.0.2.1
• ibm concert 1.0.3
Related
Weakness · CWE (1)
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere weakness
References
- https://www.ibm.com/support/pages/node/7180303 Vendor Advisory