CVE-2024-38324 in Storage Defender

Sumário

de MITRE • 25/09/2024

IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsável: Ibm
• Reservar: 13/06/2024
• Divulgação: 25/09/2024
• Moderação: aceite
• Entrada: VDB-278361
• CPE: pronto
• CWE: CWE-297 (confirmado)
• CVSS: 6.5 (NVD)
• EPSS: 0.00344
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-38324
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-38324
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-38324/