5.9
Medium
CVE-2024-47119 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow…
Description
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Storage Defender - Resiliency Service 2.0 | 2.0.0 → 2.0.9 | No fix stated |
Other CVEs of Storage Defender - Resiliency Service
The 12 CVEs of Storage Defender - Resiliency Service →
CVE-2025-64650
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files
6.5
Medium
CVE-2024-22314
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that…
5.9
Medium
CVE-2024-38325
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain…
5.9
Medium
CVE-2024-52361
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be…
5.7
Medium