CVEvulnerability

CVE-2024-45673

5.5 MEDIUM Published 2025-02-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-02-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-260

Description

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.

Affected configurations

• ibm security verify bridge directory sync (>= 1.0.1 <= 1.0.12) • ibm security verify gateway for radius (>= 1.0.1 <= 1.0.11) • ibm security verify gateway for windows login (>= 1.0.1 <= 1.0.10)

Related

Weakness · CWE (1)

  • CWE-260 Password in Configuration File weakness

References