CVE-2024-45647

CVSS 3.1 Score 5.6 of 10 (medium)

Details

Published Jan 20, 2025
CWE ID 620

Summary

CVE-2024-45647 is a vulnerability affecting IBM Security Verify Access versions 10.0.0 to 10.0.8 and IBM Security Verify Access Docker 10.0.0 to 10.0.8. This issue permits an unverified user to alter the password of an expired account, bypassing the need for prior password knowledge. This security weakness could lead to unauthorized account access and potential data breaches. IBM strongly recommends users upgrade to the latest software versions to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share