CVE-2024-45674

LOW

3.3

Descricao

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user.

Detalhes CVE

Pontuacao CVSS v3.13.3

SeveridadeLOW

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado2/22/2025

Ultima modificacao8/18/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

ibm:security_verify_bridge_directory_syncibm:security_verify_gateway_for_radiusibm:security_verify_gateway_for_windows_login

Fraquezas (CWE)

CWE-532

Referencias

https://www.ibm.com/support/pages/node/7183801(psirt@us.ibm.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.