CVE-2024-52891

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-01-07

Last modified

2025-01-07

Weaknesses

CWE-116, CWE-117

Affected products

• Concert (Ibm)

References

• https://www.ibm.com/support/pages/node/7180303