What’s Vulnerable › Vulnerabilities
CVE-2024-45674: IBM Security Verify Bridge information disclosure
- Severity: low (CVSS 3.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-02-22 · updated 2026-06-17
- Weakness: CWE-532
Description
IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user.
Affected products
- IBM Security Verify Bridge Directory Sync: from 1.0.1 through 1.0.12
- IBM Security Verify Gateway For Radius: from 1.0.1 through 1.0.11
- IBM Security Verify Gateway For Windows Login: from 1.0.1 through 1.0.10
References
Get alerted when CVE-2024-45674 or the next vulnerability affects your stack