Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:storage_defender_resiliency_service:2.0.7:*:*:*:*:*:*:*

part: a version: 2.0.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductStorage Defender Resiliency Service (6074e145-24be-5820-a87a-a32c376fcc78)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38325 vulnerable 2026-06-08 06:41:45.072750 IBM Storage Defender information disclosure
MEDIUM (5.9)
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2025-01-27T15:27:18.934Z
Updated: 2025-01-27T15:40:30.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38324 vulnerable 2026-06-08 06:41:45.071487 IBM Storage Defender improper certificate validation
MEDIUM (5.9)
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.
Published: 2024-09-24T10:24:43.447Z
Updated: 2024-09-24T13:48:52.386Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.