Storage Defender Resiliency Service

storage_defender_resiliency_service

Vendor: Ibm • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-64650 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Dec 8, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files.
CVE-2024-22314 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Apr 16, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2024-52361 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Dec 18, 2024 N/A· v4 5.7 MEDIUM· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be read by an authenticated user with access to the pod.
CVE-2024-47119 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Dec 18, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and...Show more IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client.Show less
CVE-2023-50956 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Dec 18, 2024 N/A· v4 4.9 MEDIUM· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text.
CVE-2024-38322 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Jun 28, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 agent username and password error response discrepancy exposes product to brute force enumeration. IBM X-Force ID: 294869.
CVE-2024-27261 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Apr 12, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to install a potentially dangerous tar file, which could give them access to subsequent systems where the package was installed....Show more IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to install a potentially dangerous tar file, which could give them access to subsequent systems where the package was installed. IBM X-Force ID: 283986.Show less
CVE-2024-22313 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Feb 10, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or...Show more IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 278749.Show less
CVE-2024-22312 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Feb 10, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 278748.
CVE-2023-50957 1Ibm 1Storage Defender Resiliency Service Jun 17, 2026 Feb 10, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after obtaining encrypted data from clear text key storage. IBM X-Force ID: 275783.