CVE-2024-38324
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Sep 25, 2024
Updated: Sep 30, 2024
CWE ID 297
CWE ID 295
Summary
CVE-2024-38324 is a vulnerability affecting IBM Storage Defender 2.0.0 through 2.0.7. During registration and unregistration operations, the defender-sensor-cmd CLI fails to validate server names, making it possible for attackers with system access to obtain sensitive information. This issue could potentially lead to unauthorized access and data exposure, emphasizing the importance of updating to a patched version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- IBM Corporation