CVE-2025-64650 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files

Description

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files.

Affected products and versions

Product	Affected versions	Fixed in
Storage Defender - Resiliency Service 2.0	2.0.0 → 2.0.18	No fix stated

Other CVEs of Storage Defender - Resiliency Service

The 12 CVEs of Storage Defender - Resiliency Service →

CVE-2024-22314 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that… 5.9 Medium CVE-2024-38325 IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain… 5.9 Medium CVE-2024-52361 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9  stores user credentials in plain text which can be… 5.7 Medium CVE-2023-50956 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly… 4.4 Medium