VULNERABILITY INTELLIGENCE

CVE-2024-38325

CVSS score5.9 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2025-01-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Weakness classification

  • CWE-311: Missing Encryption of Sensitive Data

Primary references