CVE-2024-52891: IBM Concert Software log manipulation

Q: What is the severity of CVE-2024-52891?

CVE-2024-52891 has a high severity rating due to potential information disclosure and injection vulnerabilities.

Q: How do I fix CVE-2024-52891?

To fix CVE-2024-52891, upgrade IBM Concert Software to a version later than 1.0.3.

Q: Who is affected by CVE-2024-52891?

CVE-2024-52891 affects users of IBM Concert Software versions 1.0.0 through 1.0.3.

Q: What type of vulnerability is CVE-2024-52891?

CVE-2024-52891 is classified as an improper log neutralization vulnerability.

Q: Can an unauthenticated user exploit CVE-2024-52891?

No, CVE-2024-52891 can only be exploited by an authenticated user.

Published Jan 6, 2025

Updated

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3

could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

Other sources

IBM Concert Software could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization.

— IBM

Affected Software

6 affected components

IBM Concert Software<=1.0.0, 1.0.1, 1.0.2, 1.0.2.1, 1.0.3

IBM Concert=1.0.0

IBM Concert=1.0.1

IBM Concert=1.0.2

IBM Concert=1.0.2.1

IBM Concert=1.0.3

Event History

Jan 6, 2025

CVE Published

via IBM·12:00 AM

Jan 7, 2025

CVE Published

via MITRE·11:58 AM

Data Sourced

via MITRE·11:58 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7180303

Frequently Asked Questions

What is the severity of CVE-2024-52891?

CVE-2024-52891 has a high severity rating due to potential information disclosure and injection vulnerabilities.

How do I fix CVE-2024-52891?

To fix CVE-2024-52891, upgrade IBM Concert Software to a version later than 1.0.3.

Who is affected by CVE-2024-52891?