CVE-2024-55912

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-559135.3IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacker could send a speciCVE-2024-559165.5In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet IfCVE-2024-559177.8An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatioCVE-2024-559185.3An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that CVE-2024-559204.3TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionalitCVE-2024-559218.8TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionalitCVE-2024-559225.4TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionalitCVE-2024-559234.3TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionalitCVE-2024-559248.0TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionalitCVE-2024-559257.5In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly valiCVE-2024-559269.8A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulCVE-2024-559277.5A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys. These weaknesses allow attacker