How severe is CVE-2024-45672?

CVE-2024-45672 has a CVSS 3.x base score of 6.0, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.

Is CVE-2024-45672 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (4th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-45672?

CVE-2024-45672 affects Ibm Security Verify Bridge. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-45672?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-45672 have an EU (EUVD) identifier?

Yes. CVE-2024-45672 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-41750.

When was CVE-2024-45672 published?

CVE-2024-45672 was published on 2025-01-23 and last updated on 2026-06-17.

CVE-2024-45672

CVE-2024-45672 is a medium-severity vulnerability in Ibm Security Verify Bridge with a CVSS 3.x base score of 6.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-471.

Key facts

Severity: Medium (CVSS 3.x base score 6.0)
EPSS exploit prediction: 0% (4th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-41750
Weakness: CWE-471
Affected product: Ibm Security Verify Bridge
Published: 2025-01-23
Last modified: 2026-06-17

Description

IBM Security Verify Bridge 1.0.0 through 1.0.15 could allow a local privileged user to overwrite files due to excessive privileges granted to the agent. which could also cause a denial of service.

Frequently asked questions

What is CVE-2024-45672?: IBM Security Verify Bridge 1.0.0 through 1.0.15 could allow a local privileged user to overwrite files due to excessive privileges granted to the agent. which could also cause a denial of service.
How severe is CVE-2024-45672?: CVE-2024-45672 has a CVSS 3.x base score of 6.0, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.
Is CVE-2024-45672 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (4th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-45672?: CVE-2024-45672 affects Ibm Security Verify Bridge. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-45672?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-45672 have an EU (EUVD) identifier?: Yes. CVE-2024-45672 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-41750.
When was CVE-2024-45672 published?: CVE-2024-45672 was published on 2025-01-23 and last updated on 2026-06-17.

References

https://www.ibm.com/support/pages/node/7181370

Affected products (1)

cpe:2.3:a:ibm:security_verify_bridge:*:*:*:*:*:*:*:*

More vulnerabilities in Ibm Security Verify Bridge

CVE-2021-38864 — High (CVSS 7.5): IBM Security Verify Bridge 1.0.5.0 could allow a user to obtain sensitive information due to improper certificate…
CVE-2021-20442 — High (CVSS 7.5): IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for…
CVE-2021-20441 — Medium (CVSS 5.9): IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
CVE-2021-38863 — Medium (CVSS 5.5): IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally…
CVE-2021-20435 — Medium (CVSS 5.5): IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to…
CVE-2021-20434 — Medium (CVSS 4.4): IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user. IBM…

All CVEs affecting Ibm Security Verify Bridge →

Other CWE-471 vulnerabilities

CVE-2022-25893 — Critical (CVSS 9.8): The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the…
CVE-2018-3722 — High (CVSS 8.8): merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which…
CVE-2018-3720 — High (CVSS 8.8): assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which…
CVE-2018-3728 — High (CVSS 8.8): hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID)…
CVE-2024-55551 — High (CVSS 8.3): An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10). Attackers can inject malicious parameters…
CVE-2024-9876 — High (CVSS 7.3): : Modification of Assumed-Immutable Data (MAID) vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects…

Browse all CWE-471 vulnerabilities →