CVE-2024-45673
IBM Security Verify Bridge information disclosure
- State
- Published
- Severity
- 5.5 Medium
- Published
- Feb 21, 2025
- Updated
- Aug 27, 2025
- Reserved
- Sep 3, 2024
Description
IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | ibm |
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | CISA-ADP |
Weaknesses
- CWE-260 Password in Configuration File
Affected Products
| Product | Versions |
|---|---|
Security Verify Bridge Directory SyncIBM |
|
References
- https://www.ibm.com/support/pages/node/7183801vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.