CVE-2024-38324

6.5 mediumEPSS 0.3%

Medium (6.5) in ibm storage defender. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWEs: CWE-295, CWE-297
Published: 2024-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:storage_defender

References

https://www.ibm.com/support/pages/node/7168640

Check your stack JSON