CVE-2024-28770

🗓️ 27 Jan 2025 01:12:44Reported by ibmType

IBM Security Directory Integrator lacks secure attributes on authorization tokens, risking information disclosure.

Reporter	Title	Published	Views	Family All 9
IBM Security Bulletins	Security Bulletin: Security Vulnerability fixed in IBM Security Directory Integrator (CVE-2024-28771, CVE-2024-28770, CVE-2024-28766)	24 Jul 202415:42	–	ibm
Circl	CVE-2024-28770	27 Jan 202501:29	–	circl
CNNVD	IBM Security Directory Integrator和IBM Security Verify Directory Integrator 安全漏洞	27 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-28770 IBM Security Directory Integrator information disclosure	27 Jan 202501:12	–	cvelist
EUVD	EUVD-2024-25856	3 Oct 202520:07	–	euvd
NVD	CVE-2024-28770	27 Jan 202502:15	–	nvd
Positive Technologies	PT-2024-10411 · Ibm · Ibm Security Directory Integrator +1	10 Mar 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-28770	23 May 202507:45	–	redhatcve
Vulnrichment	CVE-2024-28770 IBM Security Directory Integrator information disclosure	27 Jan 202501:12	–	vulnrichment

NVD

Vulners

Node

ibm security_directory_integratorMatch7.2.0

ibm security_verify_directory_integratorMatch10.0.0

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:security_directory_integrator:7.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:security_directory_integrator:10.0.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Security Directory Integrator",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.2.0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Security Verify Directory Integrator",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7161444

14 Jul 2025 18:45Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.14.8 - 6.5

EPSS0.00043

SSVC

CWE-614