Storage Defender Resiliency Service (Ibm) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2025-12-08. Vendor: Ibm.
CVEs of Storage Defender Resiliency Service
- CVE-2025-64650 - CVSS 6.5 (medium), 2025-12-08: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files.
- CVE-2024-22314 - CVSS 7.5 (high), 2025-04-16: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
- CVE-2024-38325 - CVSS 7.5 (high), 2025-01-27: IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending…
- CVE-2024-47119 - CVSS 7.5 (high), 2024-12-18: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoof a trusted entity…
- CVE-2024-52361 - CVSS 5.7 (medium), 2024-12-18: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 stores user credentials in plain text which can be read by an authenticated user with access to…
- CVE-2023-50956 - CVSS 4.9 (medium), 2024-12-18: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that…
- CVE-2024-38324 - CVSS 6.5 (medium), 2024-09-25: IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which…
- CVE-2024-38322 - CVSS 7.5 (high), 2024-06-28: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 agent username and password error response discrepancy exposes product to brute force…
- CVE-2024-25031 - CVSS 6.5 (medium), 2024-06-28: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could allow an attacker on the network to brute…
- CVE-2024-27261 - CVSS 6.8 (medium), 2024-04-12: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to install a potentially dangerous tar file, which could give them…
- CVE-2024-22313 - CVSS 7.8 (high), 2024-02-10: IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound…
- CVE-2024-22312 - CVSS 5.5 (medium), 2024-02-10: IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 278748.
- CVE-2023-50957 - CVSS 8 (high), 2024-02-10: IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after obtaining encrypted data from clear text key…
