Skip to content
OpenAdvisories
Low · 3.7 CVE-2024-43173 EUVD-2024-40095GHSA-5r8w-hmfj-p69p

IBM Concert information disclosure

Published Oct 22, 2024 · Updated Oct 22, 2024 · Assigned by ibm

Description

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

Affected products

VendorProductAffectedFixed
IBM Concert 1.0.0, 1.0.1 —

References