CVE-2024-45657 MEDIUM

CVE-2024-45657: IBM Security Verify Access incorrect privilege assignment

Vendor Ibm
Product Security Verify Access Appliance
Weakness CWE-732
Published February 4, 2025
Last update February 22, 2025
View on NVD All CVEs

CVSS base score

5.0/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment.

Key dates

02Disclosure timeline

February 4, 2025 CVE published
February 22, 2025 Record updated