CVE-2024-52361CWE-256

IBM Storage Defender - Resiliency Service information disclosure

Medium · published December 18, 2024

CVSS v3.1
5.7
EPSS
1%
Percentile
44.6
In the wild
Unconfirmed
What it is

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9

stores user credentials in plain text which can be read by an authenticated user with access to the pod.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00540 · 44.6th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2024-12-18T15:26Z
EPSS history
Timeline
  • 18 DEC 15:26Z
    IBM Storage Defender - Resiliency Service information disclosure
    cvelistv5