CVE-2024-52359
IBM Concert Software improper access controls
- State
- Published
- Severity
- 4.3 Medium
- Published
- Nov 19, 2024
- Updated
- Nov 19, 2024
- Reserved
- Nov 10, 2024
Description
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | ibm |
Weaknesses
- CWE-286 Incorrect User Management
Affected Products
| Product | Versions |
|---|---|
Concert SoftwareIBM |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.