Storage Defender Resiliency Service
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:storage_defender_resiliency_service:2.0.0:*:*:*:*:*:*:*
part: a version: 2.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Storage Defender Resiliency Service (6074e145-24be-5820-a87a-a32c376fcc78) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64650 |
vulnerable | 2026-06-08 07:39:20.015967 |
IBM Storage Defender - Resiliency Service Information Disclosure
MEDIUM (6.5)
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files.
Published: 2025-12-08T21:51:04.843Z
Updated: 2025-12-09T16:05:20.570Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52361 |
vulnerable | 2026-06-08 06:52:14.969262 |
IBM Storage Defender - Resiliency Service information disclosure
MEDIUM (5.7)
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9
stores user credentials in plain text which can be read by an authenticated user with access to the pod.
Published: 2024-12-18T15:26:43.535Z
Updated: 2024-12-18T15:58:37.023Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47119 |
vulnerable | 2026-06-08 06:48:11.444708 |
IBM Storage Defender - Resiliency Service improper certificate validation
MEDIUM (5.9)
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client.
Published: 2024-12-18T15:23:43.333Z
Updated: 2024-12-18T16:00:34.268Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38325 |
vulnerable | 2026-06-08 06:41:45.072710 |
IBM Storage Defender information disclosure
MEDIUM (5.9)
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI
could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2025-01-27T15:27:18.934Z
Updated: 2025-01-27T15:40:30.461Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38324 |
vulnerable | 2026-06-08 06:41:45.070266 |
IBM Storage Defender improper certificate validation
MEDIUM (5.9)
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.
Published: 2024-09-24T10:24:43.447Z
Updated: 2024-09-24T13:48:52.386Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38322 |
vulnerable | 2026-06-08 06:41:45.068121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25031 |
vulnerable | 2026-06-08 06:31:21.751826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22314 |
vulnerable | 2026-06-08 06:29:34.501497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50956 |
vulnerable | 2026-06-08 06:16:17.134363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.