5.9
Moyenne
CVE-2024-38324 IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during…
Description
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Storage Defender - Resiliency Service 2.0 | 2.0.0 → 2.0.7 | Pas de correctif indiqué |
Autres CVE de Storage Defender - Resiliency Service
Les 12 CVE de Storage Defender - Resiliency Service →
CVE-2025-64650
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files
6.5
Moyenne
CVE-2024-22314
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that…
5.9
Moyenne
CVE-2024-38325
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain…
5.9
Moyenne
CVE-2024-52361
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be…
5.7
Moyenne