CVE-2024-45673

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.
CVSS

No CVSS.

References
Link Resource
https://www.ibm.com/support/pages/node/7183801 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:security_verify_bridge_directory_sync:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_gateway_for_radius:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_gateway_for_windows_login:*:*:*:*:*:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

18 Jun 2025, 23:36

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:security_verify_bridge_directory_sync:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_gateway_for_radius:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_gateway_for_windows_login:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
References () https://www.ibm.com/support/pages/node/7183801 - () https://www.ibm.com/support/pages/node/7183801 - Vendor Advisory
First Time Linux
Microsoft windows
Ibm security Verify Gateway For Windows Login
Linux linux Kernel
Ibm security Verify Bridge Directory Sync
Ibm security Verify Gateway For Radius
Microsoft
Ibm

21 Feb 2025, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-21 17:15

Updated : 2025-06-18 23:36


NVD link : CVE-2024-45673

Mitre link : CVE-2024-45673


JSON object : View

Products Affected

ibm

  • security_verify_gateway_for_radius
  • security_verify_gateway_for_windows_login
  • security_verify_bridge_directory_sync

linux

  • linux_kernel

microsoft

  • windows
CWE
CWE-260

Password in Configuration File