CVEvulnerability

CVE-2024-52891

5.4 MEDIUM Published 2025-01-07 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-116, CWE-117

Description

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

Affected configurations

• ibm concert 1.0.0 • ibm concert 1.0.1 • ibm concert 1.0.2 • ibm concert 1.0.2.1 • ibm concert 1.0.3

Related

Weakness · CWE (2)

  • CWE-116 Improper Encoding or Escaping of Output weakness
  • CWE-117 Improper Output Neutralization for Logs weakness

References