Skip to content
Sign in
5.9 Medium

CVE-2024-52366 IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow a remote attacker to obtain sensitive…

Description

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Affected products and versions

Product Affected versions Fixed in
Concert Software Versions not published

Other CVEs of Concert Software

The 30 CVEs of Concert Software →
CVE-2025-36083 IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to… 6.2 Medium CVE-2025-36081 IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of… 5.3 Medium CVE-2025-1761 IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated… 5.9 Medium CVE-2025-0656 IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting 6.1 Medium
Track this CVE