CVE-2024-45647CWE-620

IBM Security Verify Access unverified password change

Medium · published January 20, 2025

CVSS v3.1
5.6
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-620 · Unverified Password Change
Published
2025-01-20T14:50Z
EPSS history
Timeline
  • 20 JAN 14:50Z
    IBM Security Verify Access unverified password change
    cvelistv5