What’s Vulnerable › Vulnerabilities
CVE-2024-45673: IBM Security Verify Bridge information disclosure
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-02-21 · updated 2026-06-17
- Weakness: CWE-260
Description
IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.
Affected products
- IBM Security Verify Bridge Directory Sync: from 1.0.1 through 1.0.12
- IBM Security Verify Gateway For Radius: from 1.0.1 through 1.0.11
- IBM Security Verify Gateway For Windows Login: from 1.0.1 through 1.0.10
References
Get alerted when CVE-2024-45673 or the next vulnerability affects your stack