CVE-2024-43177

—

CVSS 3.1

9.8 critical

EPSS

<1%p25

Published

Oct 22, 2024 (Oct 22, 2024)

Modified

Jun 17, 2026

Description

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

Vendors: ibm
Products: concert
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.