VYPR
Medium severity5.4NVD Advisory· Published Jan 7, 2025· Updated Jun 17, 2026

CVE-2024-52891

CVE-2024-52891

Description

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3

could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • IBM/Concert5 versions
    cpe:2.3:a:ibm:concert:1.0.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:concert:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:concert:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:concert:1.0.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:concert:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:concert:1.0.3:*:*:*:*:*:*:*
  • Range: <=1.0.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.