CVE-2024-27277CWE-200

IBM Storage Protect Plus Server information disclosure

Medium · published March 21, 2024

CVSS v3.1
6.2
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

The private key for the IBM Storage Protect Plus Server 10.1.0 through 10.1.16 certificate can be disclosed, undermining the security of the certificate. IBM X-Force ID: 285205.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-03-21T17:07Z
EPSS history
Timeline
  • 21 MAR 17:07Z
    IBM Storage Protect Plus Server information disclosure
    cvelistv5