CVE-2024-45647: IBM Security Verify Access unverified password change
IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password.
Other sources
IBM Security Verify Access could allow could an unverified user to change the password of an expired user without prior knowledge of that password.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45647?
CVE-2024-45647 is classified as a high severity vulnerability due to its ability to allow unverified users to change expired passwords.
How do I fix CVE-2024-45647?
To fix CVE-2024-45647, it is recommended to upgrade IBM Security Verify Access and IBM Security Verify Access Docker to version 10.0.9 or later.
What versions are affected by CVE-2024-45647?
CVE-2024-45647 affects IBM Security Verify Access versions 10.0.0 through 10.0.8 and IBM Security Verify Access Docker versions 10.0.0 through 10.0.8.
What impact does CVE-2024-45647 have on user accounts?
CVE-2024-45647 allows unauthorized users to reset the passwords of expired user accounts without prior knowledge of the current password.
Is there a workaround for CVE-2024-45647?
Currently, the primary resolution for CVE-2024-45647 is to upgrade to a non-affected version, as no workaround has been provided.