CVE-2024-45670

8.1 highEPSS 0.3%

High (8.1) in ibm soar. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowing the original password, but the user account must be compromised prior to the weak recovery mechanism.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-640
Published: 2024-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:soar

References

https://www.ibm.com/support/pages/node/7172206

Check your stack JSON