Lucene search
HistoryJun 28, 2024 - 7:15 p.m.
CVE-2024-38322
ibm
storage defender
resiliency service
username
password
error response
brute force enumeration
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
9.1%
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 agent username and password error response discrepancy exposes product to brute force enumeration. IBM X-Force ID: 294869.
Related
cvelist
cvelist
CVE-2024-38322 IBM Storage Defender information disclosure
2024-06-28 18:34:40
vulnrichment
vulnrichment
CVE-2024-38322 IBM Storage Defender information disclosure
2024-06-28 18:34:40
cve
cve
CVE-2024-38322
2024-06-28 19:15:06
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-38322