CVE-2024-52359CWE-286

IBM Concert Software improper access controls

Medium · published November 19, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-286 · Incorrect User Management
Published
2024-11-19T19:39Z
EPSS history
Timeline
  • 19 NOV 19:39Z
    IBM Concert Software improper access controls
    cvelistv5