{"id":"CVE-2024-52359","details":"IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.","modified":"2026-10-24T10:31:16.508192019Z","published":"2024-11-19T20:15:31.840Z","database_specific":{},"references":[{"type":"ADVISORY","url":"https://www.ibm.com/support/pages/node/7176346"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ibm/concert","events":[{"introduced":"426f6aa6046da617b10805b6640f52450316ba2e"},{"last_affected":"27f6134d057024b504a35b9403095a06abb42875"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:ibm:concert:1.0.0:*:*:*:*:*:*:*","range":[{"introduced":"1.0.0"},{"last_affected":"1.0.0"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:ibm:concert:1.0.1:*:*:*:*:*:*:*","range":[{"introduced":"1.0.1"},{"last_affected":"1.0.1"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.0.2"},{"last_affected":"1.0.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:ibm:concert:1.0.2:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:ibm:concert:1.0.2.1:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2.1"},{"last_affected":"1.0.2.1"}],"source":"CPE_STRING"}]}}],"versions":["1.0.0","1.0.1","1.0.2","v1.0.2.1","v1.0.2","v1.0.1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-52359.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}