PT-2025-2726 · Ibm · Ibm Security Verify Bridge

Published 2025-01-22 · Updated 2025-08-14 · CVE-2024-45672

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Bridge versions 1.0.0 through 1.0.15

Description: The issue allows a local privileged user to overwrite files due to excessive privileges granted to the agent, which could also cause a denial of service.

Recommendations: For versions 1.0.0 through 1.0.15, consider restricting the privileges granted to the agent to prevent file overwrites and minimize the risk of a denial of service. As a temporary workaround, review and adjust the agent's permissions to ensure they are in line with the principle of least privilege.

Fix

DoS

Weakness Enumeration

CWE-471

Related Identifiers

BDU:2025-05981

CVE-2024-45672

Affected Products

Ibm Security Verify Bridge

References · 9

• https://osv.dev/vulnerability/CVE-2024-45672 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05981 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-45672 · Security Note
• https://ibm.com/support/pages/node/7181370 · Vendor Advisory
• https://t.me/cvedetector/16226 · Telegram Post
• https://twitter.com/CVEnew/status/1882501629783757300 · Twitter Post
• https://vuldb.com/pl/?id.293285 · Note
• https://ibm.com/support/pages/node/7174819 · Note
• https://t.me/cveNotify/132294 · Telegram Post