IBM Concert w wersjach 1.0.0 i 1.0.1 jest podatny na ataki opierające się na użyciu cookies bez atrybutu SameSite.
▸ Pokaż oryginał (EN)
IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NIBM Concert
APPIbm1.0.01.0.1
Powiązane podatności
IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted...
IBM Concert 1.0.0 through 2.1.0 could allow a local user with specific knowledge about the system's architectu...
IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the fi...
IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds chec...
IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition ...