← Back

CVE-2024-45674

nvd nist
Published: Feb 22, 2025Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user.

Affected (3)

Ibm
3 products
Security Verify Bridge Directory Sync
Security Verify Gateway For Radius
Security Verify Gateway For Windows Login
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Security Verify Bridge Directory Sync
From 1.0.1 to 1.0.12
Security Verify Gateway For Radius
From 1.0.1 to 1.0.11
Security Verify Gateway For Windows Login
From 1.0.1 to 1.0.10

Related CWEs

CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.