← Back

CVE-2024-45670

nvd nist
Published: Nov 14, 2024Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowing the original password, but the user account must be compromised prior to the weak recovery mechanism.

Affected (1)

Products: Ibm: Soar
Ibm
1 product
Soar
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Soar
Before 51.0.2.0

Related CWEs

CWE-640
Weak Password Recovery Mechanism for Forgotten Password
The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.