VULNERABILITY INTELLIGENCE

CVE-2024-45647

CVSS score5.6 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-01-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password.

Weakness classification

  • psirt@us.ibm.com: CWE-620
  • nvd@nist.gov: NVD-CWE-Other

Primary references