PT-2025-5797 · Ibm · Ibm Security Verify Directory

Published

2025-02-05

·

Updated

2025-08-08

·

CVE-2024-51450

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Security Verify Directory versions 10.0.0 through 10.0.3
Description The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
Recommendations For IBM Security Verify Directory versions 10.0.0 through 10.0.3, consider restricting access to the system to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider disabling any functionality that allows remote authenticated attackers to send specially crafted requests until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-02306
CVE-2024-51450

Affected Products

Ibm Security Verify Directory