Description
IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Concert Software | 1.0.0, 1.0.1, 1.0.2 | — |
Medium · 5.3
CVE-2024-49354
EUVD-2024-43684GHSA-jmh6-3m65-qgmg
IBM Concert information disclosure
Published Jan 18, 2025 · Updated Jan 21, 2025 · Assigned by ibm