CVE-2024-45673CWE-260

IBM Security Verify Bridge information disclosure

Medium · published February 21, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00136 · 2.8th percentile
Weakness
CWE-260 · Password in Configuration File
Published
2025-02-21T16:45Z
EPSS history
Timeline
  • 21 FEB 16:45Z
    IBM Security Verify Bridge information disclosure
    cvelistv5