CVE-2024-45650 - Vulnerability Details - OpenCVE

IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Ibm	Security Verify Directory

Configuration 1 [-]

cpe:2.3:a:ibm:security_verify_directory:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7182169

History

Fri, 08 Aug 2025 17:30:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:ibm:security_verify_directory::::::::

Fri, 11 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00078}`	epss `{'score': 0.00093}`

Fri, 31 Jan 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 31 Jan 2025 15:15:00 +0000

Type	Values Removed	Values Added
Description		IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation.
Title		IBM Security Verify Directory denial of service
First Time appeared		Ibm Ibm security Verify Directory
Weaknesses		CWE-754
CPEs		cpe:2.3:a:ibm:security_verify_directory:10.0.0:::::::* cpe:2.3:a:ibm:security_verify_directory:10.0.3:::::::*
Vendors & Products		Ibm Ibm security Verify Directory
References		https://www.ibm.com/support/pages/node/7182169
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-01-31T15:07:24.198Z

Updated: 2025-01-31T15:24:33.790Z

Reserved: 2024-09-03T13:50:26.295Z

Link: CVE-2024-45650

Vulnrichment

Updated: 2025-01-31T15:24:27.392Z

NVD

Status : Analyzed

Published: 2025-01-31T15:15:13.350

Modified: 2025-08-08T17:24:38.903

Link: CVE-2024-45650

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-45650", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2024-09-03T13:50:26.295Z", "datePublished": "2025-01-31T15:07:24.198Z", "dateUpdated": "2025-01-31T15:24:33.790Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:ibm:security_verify_directory:10.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_verify_directory:10.0.3:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Security Verify Directory", "vendor": "IBM", "versions": [{"lessThanOrEqual": "10.0.3", "status": "affected", "version": "10.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation."}], "value": "IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-754", "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-01-31T15:07:24.198Z"}, "references": [{"url": "https://www.ibm.com/support/pages/node/7182169"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM Security Verify Directory denial of service", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-31T15:24:19.672039Z", "id": "CVE-2024-45650", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-31T15:24:33.790Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-45650", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-31T15:24:19.672039Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-31T15:24:27.392Z"}}], "cna": {"title": "IBM Security Verify Directory denial of service", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:security_verify_directory:10.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_verify_directory:10.0.3:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Security Verify Directory", "versions": [{"status": "affected", "version": "10.0.0", "versionType": "semver", "lessThanOrEqual": "10.0.3"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.ibm.com/support/pages/node/7182169"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation.", "supportingMedia": [{"type": "text/html", "value": "IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-754", "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-01-31T15:07:24.198Z"}}}, "cveMetadata": {"cveId": "CVE-2024-45650", "state": "PUBLISHED", "dateUpdated": "2025-01-31T15:24:33.790Z", "dateReserved": "2024-09-03T13:50:26.295Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2025-01-31T15:07:24.198Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}