VYPR
Unrated severityNVD Advisory· Published Oct 22, 2024· Updated Oct 22, 2024

IBM Concert improper certificate validation

CVE-2024-43177

Description

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

Affected products

1
  • cpe:2.3:a:ibm:concert:1.0.0:*:*:*:*:*:*:*
    Range: 1.0.0, 1.0.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.