CVE-2024-45647

9.8 criticalEPSS 0.3%

Critical (9.8) in ibm. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-620
Published: 2025-01-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:security_verify_access
ibm:security_verify_access_docker

References

https://www.ibm.com/support/pages/node/7176212

Check your stack JSON