CVE-2024-45657

Summary

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment.

Affected Software

VendorProductVersion RangeStatus
IBMSecurity Verify Access Appliance10.0.0 <= 10.0.8affected
IBMSecurity Verify Access Container10.0.0 <= 10.0.8affected

Weaknesses

  • CWE-732: CWE-732 Incorrect Permission Assignment for Critical Resource

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References