CVE-2024-45675: IBM Informix Dynamic Server Authentication Bypass

Published Nov 26, 2025
·
Updated

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.

Other sources

IBM Informix Dynamic Server could allow a local user on the system to log into the Informix server as administrator without a password.

— IBM

Affected Software

3 affected components
IBM Informix Dynamic Server
IBM Informix Dynamic Server<=14.10
IBM Informix Dynamic Server<14.10

Remediation

Information

Remediation/Fixes Impact is limited to Informix Server on Windows. No exploitation has been observed or is possible on non‑Windows platforms. Update to IBM Informix Dynamic Server 14.10.xC11W1. Fix is available on IBM Fix Central - Select Fixes - Informix Server . Follow the instructions for Database server upgrades in the Informix Servers documentation Follow the instructions to install or upgrade Informix in the What's new and changed in Informix in the IBM Cloud Pak for Data documentation.

Event History

Nov 26, 2025
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Dec 2, 2025
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:16 AM
DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2024-45675?

CVE-2024-45675 is considered a critical vulnerability due to its potential for unauthorized access to the Informix server.

2

How do I fix CVE-2024-45675?

To fix CVE-2024-45675, update your IBM Informix Dynamic Server to a version beyond 14.10 that addresses this vulnerability.

3

Who is affected by CVE-2024-45675?

CVE-2024-45675 affects users running IBM Informix Dynamic Server version 14.10 or lower.

4

Can CVE-2024-45675 be exploited remotely?

CVE-2024-45675 requires local access to the system, thus it cannot be exploited remotely.

5

What are the potential consequences of CVE-2024-45675?

The potential consequences of CVE-2024-45675 include unauthorized administrative access to the Informix server, leading to possible data breaches.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203