CVE-2024-45675: IBM Informix Dynamic Server Authentication Bypass
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.
Other sources
IBM Informix Dynamic Server could allow a local user on the system to log into the Informix server as administrator without a password.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Informix Dynamic Serverto a version that resolves this vulnerability.Fixed in 14.10.xC11W1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45675?
CVE-2024-45675 is considered a critical vulnerability due to its potential for unauthorized access to the Informix server.
How do I fix CVE-2024-45675?
To fix CVE-2024-45675, update your IBM Informix Dynamic Server to a version beyond 14.10 that addresses this vulnerability.
Who is affected by CVE-2024-45675?
CVE-2024-45675 affects users running IBM Informix Dynamic Server version 14.10 or lower.
Can CVE-2024-45675 be exploited remotely?
CVE-2024-45675 requires local access to the system, thus it cannot be exploited remotely.
What are the potential consequences of CVE-2024-45675?
The potential consequences of CVE-2024-45675 include unauthorized administrative access to the Informix server, leading to possible data breaches.