Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-43177 EUVD-2024-40096GHSA-jrw2-3gwx-j89g

IBM Concert improper certificate validation

Published Oct 22, 2024 · Updated Oct 22, 2024 · Assigned by ibm

Description

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

Affected products

VendorProductAffectedFixed
IBM Concert 1.0.0, 1.0.1 —

References