{"id":"CVE-2024-45673","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-45673","generatedAt":"2026-10-28T01:10:20.493Z","title":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can…","description":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.","published":"2025-02-21T17:15:13.000Z","lastModified":"2026-06-17T07:54:39.000Z","status":"Modified","sourceIdentifier":"psirt@us.ibm.com","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-260"],"affected":["ibm/security verify bridge directory sync","ibm/security verify gateway for radius","ibm/security verify gateway for windows login"],"epss":{"score":0.00136,"percentile":0.03042,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7183801","tags":["Vendor Advisory"],"source":"psirt@us.ibm.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-45673","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}