CVE-2024-45672

MediumCVSS 6.0/10Last modified Jun 17, 2026

Description

IBM Security Verify Bridge 1.0.0 through 1.0.15 could allow a local privileged user to overwrite files due to excessive privileges granted to the agent. which could also cause a denial of service.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-471

Affected software

Vendor	Product	Versions
IBM	Security Verify Bridge	>= 1.0.0, <= 1.0.15

References

https://www.ibm.com/support/pages/node/7181370Vendor Advisory

Timeline

Published: Jan 23, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-456735.5IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM CVE-2024-456743.3IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM CVE-2024-456757.8IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password CVE-2024-456764.3IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user to upload insecure files, due to insufficient file type di CVE-2024-456784.2Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extrac CVE-2024-456798.4Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a CVE-2024-45685.5In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow.CVE-2024-456829.8There is a command injection vulnerability that may allow an attacker to inject malicious input on the device's operating system.CVE-2024-456872.4Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in Payara Platform Payara Server CVE-2024-456896.5A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve informa CVE-2024-45695.4The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, an CVE-2024-456907.5A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts.