CVE-2024-38324 in Storage Defender

الملخص

بحسب MITRE • 25/09/2024

IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• مسؤول: Ibm
• حجز: 13/06/2024
• إفشاء: 25/09/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-278361
• CPE: جاهز
• CWE: CWE-297 (مؤكد)
• CVSS: 6.5 (NVD)
• EPSS: 0.00344
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-38324
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-38324
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-38324/