← Back

CVE-2024-45647

nvd nist
Published: Jan 20, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password.

Affected (2)

Ibm
2 products
Security Verify Access
Security Verify Access Docker
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Security Verify Access
From 10.0.0 to 10.0.8
Security Verify Access Docker
From 10.0.0 to 10.0.8

Related CWEs

CWE-620
Unverified Password Change
When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.