{"id":"CVE-2024-45674","state":"PUBLISHED","title":"IBM Security Verify Bridge information disclosure","description":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 \n\nstores potentially sensitive information in log files that could be read by a local user.","publishedAt":"2025-02-21T23:29:17.020Z","updatedAt":"2025-08-15T14:26:14.800Z","severity":{"score":3.3,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Security Verify Bridge Directory Sync"],"affected":[{"vendor":"IBM","product":"Security Verify Bridge Directory Sync","defaultStatus":"unaffected","versions":[{"version":"1.0.1","status":"affected","lessThanOrEqual":"1.0.12","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:security_verify_bridge:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:security_verify_bridge:1.0.12:*:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7183801"],"weaknesses":["CWE-532"],"ingestedAt":"2026-10-29T20:07:47.831Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/45xxx/CVE-2024-45674.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-45674","state":"PUBLISHED","datePublished":"2025-02-21T23:29:17.020Z","dateUpdated":"2025-08-15T14:26:14.800Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2024-09-03T13:50:43.964Z"},"containers":{"cna":{"title":"IBM Security Verify Bridge information disclosure","descriptions":[{"lang":"en","value":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 \n\nstores potentially sensitive information in log files that could be read by a local user."}],"affected":[{"vendor":"IBM","product":"Security Verify Bridge Directory Sync","defaultStatus":"unaffected","versions":[{"version":"1.0.1","status":"affected","lessThanOrEqual":"1.0.12","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:security_verify_bridge:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:security_verify_bridge:1.0.12:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7183801","tags":["vendor-advisory","patch"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":3.3,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-532","description":"CWE-532 Insertion of Sensitive Information into Log File","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2025-08-15T14:26:14.800Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-22T15:32:32.616059Z","id":"CVE-2024-45674","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-22T15:32:48.772Z"}}]}}}