Podatność CVE-2024-38324
Publikacja: 2024-09-25

Opis:
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.

Typ:

CWE-297

 (Improper Validation of Host-specific Certificate Data)

 Referencje:
https://www.ibm.com/support/pages/node/7168640
Copyright 2024, cxsecurity.com

 

Back to Top