Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-52891 EUVD-2024-46202GHSA-8h38-qx4m-2f5r

IBM Concert Software log manipulation

Published Jan 7, 2025 · Updated Jan 7, 2025 · Assigned by ibm

Description

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3

could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

Affected products

VendorProductAffectedFixed
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, 1.0.3 —

References