Lucene search

China National Vulnerability DatabaseCNVD-2024-16923

HistoryMar 26, 2024 - 12:00 a.m.

IBM Storage Protect Plus Server Information Disclosure Vulnerability (CNVD-2024-16923)

2024-03-2600:00:00

China National Vulnerability Database

www.cnvd.org.cn

ibm

storage protect plus

information disclosure

vulnerability

international business machines

recovery

replication

retention

virtual machines

databases

applications

file systems

saas workloads

containers

private key

certificate

security

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

IBM Storage Protect Plus Server is an IBM Storage software from International Business Machines (IBM) that provides recovery, replication, retention and reuse for virtual machines, databases, applications, file systems, SaaS workloads and containers. An information disclosure vulnerability exists in IBM Storage Protect Plus Server versions 10.1.0 through 10.1.16, which can be exploited by an attacker to obtain the private key of a certificate, resulting in reduced security of the certificate.

CPENameOperatorVersion
ibm storage protect plus server >=10.1.0，le10.1.16

CPE	Name	Operator	Version
	ibm storage protect plus server >=10.1.0，	le	10.1.16