CVE-2024-43173

—

CVSS 3.1

3.7 low

EPSS

<1%p12

Published

Oct 22, 2024 (Oct 22, 2024)

Modified

Jun 17, 2026

Description

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

Vendors: ibm
Products: concert
Weakness: CWE-1275
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.