CVE-2024-45674

LOW

3.3

Description

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user.

CVE Details

CVSS v3.1 Score3.3

SeverityLOW

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published2/22/2025

Last Modified8/18/2025

Sourcenvd

Honeypot Sightings0

Affected Products

ibm:security_verify_bridge_directory_syncibm:security_verify_gateway_for_radiusibm:security_verify_gateway_for_windows_login

Weaknesses (CWE)

CWE-532

References

https://www.ibm.com/support/pages/node/7183801(psirt@us.ibm.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.