Storage Defender
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:storage_defender:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Storage Defender (ee94dd2f-b491-5e5d-b09f-9251e0ffdf47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-38325 |
vulnerable | 2026-06-08 06:41:45.072905 |
IBM Storage Defender information disclosure
MEDIUM (5.9)
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI
could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2025-01-27T15:27:18.934Z
Updated: 2025-01-27T15:40:30.461Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38324 |
vulnerable | 2026-06-08 06:41:45.072335 |
IBM Storage Defender improper certificate validation
MEDIUM (5.9)
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.
Published: 2024-09-24T10:24:43.447Z
Updated: 2024-09-24T13:48:52.386Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27261 |
vulnerable | 2026-06-08 06:31:28.354754 |
IBM Storage Defender - Resiliency Service privilege escalation
MEDIUM (6.4)
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to install a potentially dangerous tar file, which could give them access to subsequent systems where the package was installed. IBM X-Force ID: 283986.
Published: 2024-04-12T12:13:17.338Z
Updated: 2024-08-02T00:27:59.747Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25031 |
vulnerable | 2026-06-08 06:31:21.754267 |
IBM Storage Defender information disclosure
MEDIUM (6.5)
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could allow an attacker on the network to brute force account credentials. IBM X-Force ID: 281678.
Published: 2024-06-28T18:32:31.632Z
Updated: 2024-08-01T23:36:21.289Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.