CVE-2024-45673

Published Feb 21, 2025

Last updated 7 days ago

Overview

Description
IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.
Source
psirt@us.ibm.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.5
Impact score
3.6
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

Weaknesses

psirt@us.ibm.com
CWE-260
134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-260

Social media

Hype score
Not currently trending