← All advisories

Unrated severityNVD Advisory· Published Oct 22, 2024· Updated Oct 22, 2024

IBM Concert improper certificate validation

CVE-2024-43177

Description

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

IBM/Concertv52 versions
cpe:2.3:a:ibm:concert:1.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:concert:1.0.0:*:*:*:*:*:*:*range: 1.0.0, 1.0.1
- (no CPE)range: 1.0.0, 1.0.1

Patches

Vulnerability mechanics

References

1

www.ibm.com/support/pages/node/7173596mitrevendor-advisory

News mentions

0

No linked articles in our index yet.