Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Storage_defender_resiliency_service
(Ibm)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 8 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2025-04-16 | CVE-2024-22314 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. | Storage_defender_resiliency_service | 7.5 | ||
| 2024-12-18 | CVE-2023-50956 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text. | Storage_defender_resiliency_service | 4.9 | ||
| 2024-12-18 | CVE-2024-47119 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. | Storage_defender_resiliency_service | 7.5 | ||
| 2024-12-18 | CVE-2024-52361 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be read by an authenticated user with access to the pod. | Storage_defender_resiliency_service | 5.7 | ||
| 2024-02-10 | CVE-2023-50957 | IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after obtaining encrypted data from clear text key storage. IBM X-Force ID: 275783. | Storage_defender_resiliency_service | 7.2 | ||
| 2024-02-10 | CVE-2024-22312 | IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 278748. | Storage_defender_resiliency_service | 5.5 | ||
| 2024-02-10 | CVE-2024-22313 | IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 278749. | Storage_defender_resiliency_service | 7.8 | ||
| 2024-06-28 | CVE-2024-38322 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 agent username and password error response discrepancy exposes product to brute force enumeration. IBM X-Force ID: 294869. | Storage_defender_resiliency_service | 7.5 |