CVE-2024-43173 IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute

Description

IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.

Affected products and versions

Product	Affected versions	Fixed in
Concert	Versions not published

Other CVEs of Concert

The 62 CVEs of Concert →

CVE-2026-1501 IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation 3.7 Low CVE-2026-1510 IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection 4.7 Medium CVE-2026-3303 IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out… 3.7 Low CVE-2026-3628 IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions 5.3 Medium