CNNVD-202602-556 Information

CNNVD ID

CNNVD-202602-556

CVE-2024-43181

  • CNNVD Published: 2026-02-04

Description (Chinese)

IBM Concert是美国国际商业机器(IBM)公司的一种新工具。使用生成式 AI 来帮助管理复杂的云原生应用程序。 IBM Concert 1.0.0版本至2.1.0版本存在代码问题漏洞,该漏洞源于注销后未使会话失效,可能导致经过身份验证的用户冒充系统上的其他用户。

Description (English)

IBM Concert is a new tool for IBM. Use the Generating AI to help manage complex cloud raw applications. There is a code problem gap between IBM Concert 1.0.0 and 2.1.0, which arises from the failure to invalidate sessions after write-off, which may lead to other users of the authentication system.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

国际商业机器

Published

2026-02-04

Last Modified

2026-02-24

References

https://www.ibm.com/support/pages/node/7257006

Patch

https://www.ibm.com/support/pages/node/7257006

Share on: