Medium
CVSS 5.3
Overview
IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls.
CVE-2024-49354
IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information discl...
Risk analysis
This vulnerability is rated 🟡 MEDIUM.
- CVSS: 5.3 (MEDIUM)
- Detected tags: info_leak (tag impact: LOW)
Recommended actions:
- Reduce verbose errors, remove debug endpoints, minimize PII in logs.