PT-2025-2724 · Ibm · Ibm Security Verify Access Appliance+1

Ben Goodspeed + 8 · Published 2025-02-04 · Updated 2025-08-08 · CVE-2024-45658

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance and Container versions 10.0.0 through 10.0.8

Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

Recommendations: For versions 10.0.0 through 10.0.8, consider disabling the detailed technical error messages to minimize the risk of exploitation. Restrict access to error messages to prevent potential attackers from obtaining sensitive information.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2024-45658

Affected Products

Ibm Security Verify Access Appliance

Ibm Security Verify Access Container

References · 6

• https://osv.dev/vulnerability/CVE-2024-45658 · Vendor Advisory
• https://ibm.com/support/pages/node/7182386 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45658 · Security Note
• https://t.me/cvedetector/17258 · Telegram Post
• https://t.me/cveNotify/131470 · Telegram Post
• https://twitter.com/CVEnew/status/1886879975766102223 · Twitter Post