CVE-2024-38325

7.5 highEPSS 0.3%

High (7.5) in ibm storage defender. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI could allow a remote attacker to obtain sensitive information, caused by sending network requests over an insecure channel. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-311
Published: 2025-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:storage_defender

References

https://www.ibm.com/support/pages/node/7168640

Check your stack JSON