PT-2025-7418 · Ibm · Ibm Security Verify Gateway For Radius+2

Published 2025-02-21 · Updated 2025-02-22 · CVE-2024-45674

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Verify Bridge Directory Sync versions 1.0.1 through 1.0.12 IBM Security Verify Gateway for Windows Login versions 1.0.1 through 1.0.10 IBM Security Verify Gateway for Radius versions 1.0.1 through 1.0.11

Description The issue concerns the storage of potentially sensitive information in log files, which could be accessed by a local user.

Recommendations For IBM Security Verify Bridge Directory Sync versions 1.0.1 through 1.0.12, restrict access to log files to minimize the risk of sensitive information disclosure. For IBM Security Verify Gateway for Windows Login versions 1.0.1 through 1.0.10, consider implementing access controls to log files until a fix is available. For IBM Security Verify Gateway for Radius versions 1.0.1 through 1.0.11, limit local user privileges to reduce the potential for log file access.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2024-45674

Affected Products

Ibm Security Verify Bridge Directory Sync

Ibm Security Verify Gateway For Radius

Ibm Security Verify Gateway For Windows Login

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-45674 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45674 · Vendor Advisory
• https://ibm.com/support/pages/node/7183801 · Vendor Advisory, Patch
• https://t.me/cvedetector/18700 · Telegram Post
• https://twitter.com/CVEnew/status/1893082674430124119 · Twitter Post
• https://t.me/cvenotify/112122 · Telegram Post