CVE-2024-52359: IBM Concert Software improper access controls
IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.
Other sources
Pallets Werkzeug is vulnerable to a denial of service, caused by a flaw when parsing multipart/form-data containing a large part with CR/LF character at the beginning. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52359?
CVE-2024-52359 has a moderate severity rating due to improper access controls allowing authenticated users to perform unauthorized actions.
How do I fix CVE-2024-52359?
To fix CVE-2024-52359, update IBM Concert Software to a patched version that is not affected by this vulnerability.
What software versions are affected by CVE-2024-52359?
CVE-2024-52359 affects IBM Concert Software versions 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1.
Who is impacted by CVE-2024-52359?
Businesses using the affected versions of IBM Concert Software are at risk of unauthorized actions being performed by authenticated users.
What type of vulnerability is CVE-2024-52359?
CVE-2024-52359 is an access control vulnerability that can lead to unauthorized actions by authenticated users.