CVE-2024-43173CWE-1275

IBM Concert information disclosure

Low · published October 22, 2024

CVSS v3.1

3.7

EPSS

0%

Percentile

11.2

In the wild

Unconfirmed

What it is

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

The record

Technical detail

CVSS v3.1: 3.7 · LOW
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00214 · 11.2th percentile
Weakness: CWE-1275 · Sensitive Cookie with Improper SameSite Attribute
Published: 2024-10-22T14:48Z

EPSS history

Timeline

22 OCT 14:48Z
IBM Concert information disclosure
cvelistv5