CVE-2024-52359

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7176346	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:concert:1.0.0:::::::*
	cpe:2.3:a:ibm:concert:1.0.1:::::::*
	cpe:2.3:a:ibm:concert:1.0.2:::::::*
	cpe:2.3:a:ibm:concert:1.0.2.1:::::::*

History

18 Jul 2025, 13:37

Type	Values Removed	Values Added
First Time		Ibm concert Ibm
CWE		NVD-CWE-noinfo
References	~~() https://www.ibm.com/support/pages/node/7176346 -~~	() https://www.ibm.com/support/pages/node/7176346 - Vendor Advisory
CPE		cpe:2.3:a:ibm:concert:1.0.2.1:::::::* cpe:2.3:a:ibm:concert:1.0.1:::::::* cpe:2.3:a:ibm:concert:1.0.2:::::::* cpe:2.3:a:ibm:concert:1.0.0:::::::*

Information

Published : 2024-11-19 20:15

Updated : 2025-07-18 13:37

NVD link : CVE-2024-52359

Mitre link : CVE-2024-52359

CVE.ORG link : CVE-2024-52359

JSON object : View

Products Affected

ibm

concert

CWE

CWE-286

Incorrect User Management

NVD-CWE-noinfo

{"id": "CVE-2024-52359", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-11-19T20:15:31.840", "references": [{"url": "https://www.ibm.com/support/pages/node/7176346", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-286"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls."}, {"lang": "es", "value": "IBM Concert Software 1.0.0, 1.0.1, 1.0.2 y 1.0.2.1 podr\u00eda permitir que un usuario autenticado realice acciones no autorizadas que deber\u00edan estar reservadas al administrador debido a controles de acceso inadecuados."}], "lastModified": "2025-07-18T13:37:13.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:concert:1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "557B94A2-6EC2-4F29-95AE-306B55C7C11D"}, {"criteria": "cpe:2.3:a:ibm:concert:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB02F586-96A0-4FAC-91CD-2B48EF222945"}, {"criteria": "cpe:2.3:a:ibm:concert:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35C3FEC7-5494-4120-B80F-87E19F9874F4"}, {"criteria": "cpe:2.3:a:ibm:concert:1.0.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BFF310F-2638-44A4-927B-9E799D9AC172"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}