{"id":"CVE-2024-45674","aliases":["EUVD-2025-4454","GHSA-536f-wq7f-mx95"],"status":"published","title":"IBM Security Verify Bridge information disclosure","description":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 \n\nstores potentially sensitive information in log files that could be read by a local user.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00155,"percentile":0.04669,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2025-02-21T23:29:17Z","modified":"2026-06-17T07:54:38Z","products":[{"vendor":"ibm","product":"security verify bridge directory sync"},{"vendor":"ibm","product":"security_verify_bridge_directory_sync"},{"vendor":"ibm","product":"security_verify_gateway_for_radius"},{"vendor":"ibm","product":"security_verify_gateway_for_windows_login"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7183801","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45674"},{"url":"https://github.com/advisories/GHSA-536f-wq7f-mx95"}],"sources":{"cve":[{"id":"CVE-2024-45674","title":"IBM Security Verify Bridge information disclosure","description":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 \n\nstores potentially sensitive information in log files that could be read by a local user.","status":"published","published":"2025-02-21T23:29:17.02Z","modified":"2025-08-15T14:26:14.8Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2025-4454","description":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 \n\nstores potentially sensitive information in log files that could be read by a local user.","status":"published","published":"2025-02-21T23:29:17Z","modified":"2025-08-15T14:26:14Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T20:31:56.690534Z"}],"ghsa":[{"id":"GHSA-536f-wq7f-mx95","title":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for...","description":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 \n\nstores potentially sensitive information in log files that could be read by a local user.","status":"published","published":"2025-02-22T00:33:51Z","modified":"2025-02-22T00:33:56Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:00:00.792226Z"}],"nvd":[{"id":"CVE-2024-45674","description":"IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 \n\nstores potentially sensitive information in log files that could be read by a local user.","status":"published","published":"2025-02-22T00:15:18.41Z","modified":"2026-06-17T07:54:38.73Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:10:44.508862Z"}]}}
