CNNVD-202602-555 Information
Feb 04, 2026
cve
CNNVD ID
CNNVD-202602-555
Related CVE
- CNNVD Published: 2026-02-04
Description (Chinese)
IBM Concert是美国国际商业机器（IBM）公司的一种新工具。使用生成式 AI 来帮助管理复杂的云原生应用程序。 IBM Concert 1.0.0版本至2.1.0版本存在安全漏洞，该漏洞源于对HOST标头的输入验证不当，可能导致攻击者发起跨站脚本、缓存投毒或会话劫持等多种攻击。
Description (English)
IBM Concert is a new tool for IBM. Use the Generating AI to help manage complex cloud raw applications. There is a security loophole between IBM Concert 1.0.0 and 2.1.0, which stems from inadequate input verification of the HOST header and may lead to multiple attacks by the attackers, such as cross-site scripts, caches of poisons or meetings.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
国际商业机器
Published
2026-02-04
Last Modified
2026-02-24
References
https://www.ibm.com/support/pages/node/7257006
Patch
https://www.ibm.com/support/pages/node/7257006
Share on: