Skip to content
OpenAdvisories
Medium · 5.6 CVE-2024-45670 EUVD-2024-41549GHSA-75r8-6x58-82p6

IBM Security SOAR weak password recovery mechanism

Published Nov 14, 2024 · Updated Nov 14, 2024 · Assigned by ibm

Description

IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowing the original password, but the user account must be compromised prior to the weak recovery mechanism.

Affected products

VendorProductAffectedFixed
IBM Security SOAR 51.0.1.0 —

References