Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Storage Defender - Resiliency Service — ibm.com/support/pages/node/7178587 Clear all filters
TI-2024-35033 CVE-2024-52361 · GHSA-c7jc-3j2x-59x8

IBM Storage Defender - Resiliency Service information disclosure

Priority LOW 26

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be read by an authenticated user with access to the pod.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.0054 Published 2024-12-18 No fix listed CWE-256
TI-2023-27849 CVE-2023-50956 · GHSA-3mgg-3hqg-jjq6

IBM Storage Defender - Resiliency Service information disclosure

Priority LOW 22

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0035 Published 2024-12-18 No fix listed CWE-256
TI-2024-31492 CVE-2024-47119 · GHSA-8xj5-7j6q-7c3r

IBM Storage Defender - Resiliency Service improper certificate validation

Priority LOW 32

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00269 Published 2024-12-18 No fix listed CWE-295