6.5
Medium
CVE-2024-25031 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could…
Description
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could allow an attacker on the network to brute force account credentials. IBM X-Force ID: 281678.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Storage Defender - Resiliency Service 2.0 | 2.0.0 → 2.0.4 | No fix stated |
Other CVEs of Storage Defender - Resiliency Service
The 12 CVEs of Storage Defender - Resiliency Service →
CVE-2025-64650
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files
6.5
Medium
CVE-2024-22314
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that…
5.9
Medium
CVE-2024-38325
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain…
5.9
Medium
CVE-2024-52361
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be…
5.7
Medium