CVE-2024-45673: IBM Security Verify Bridge Directory Sync

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.

Affected products

• IBM Security Verify Bridge Directory Sync: from 1.0.1, up to and including 1.0.12
• IBM Security Verify Gateway For Radius: from 1.0.1, up to and including 1.0.11
• IBM Security Verify Gateway For Windows Login: from 1.0.1, up to and including 1.0.10

Published 2025-02-21. Last modified 2026-06-17.