CVE-2024-52891CWE-117

IBM Concert Software log manipulation

Medium · published January 7, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3

could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00267 · 17.9th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2025-01-07T11:58Z
EPSS history
Timeline
  • 07 JAN 11:58Z
    IBM Concert Software log manipulation
    cvelistv5