CVE-2024-45647 — IBM Security Verify Access unverified password change

CVE-2024-45647

IBM Security Verify Access unverified password change PUBLISHED

Description (CNA)

IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password.

Affected (CNA)

Vendor / product	Versions
IBM / Security Verify Access	affected 10.0.0 through 10.0.8
IBM / Security Verify Access Docker	affected 10.0.0 through 10.0.8

CWE

CWE-620

References

https://www.ibm.com/support/pages/node/7176212

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.