PT-2024-10413 · Ibm · Ibm Storage Defender

Published 2024-09-23 · Updated 2025-08-14 · CVE-2024-38325

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Storage Defender versions 2.0.0 through 2.0.7

Description The issue is related to the IBM Storage Defender's Defender Sensor component, which has incorrect data encryption. This could allow a remote attacker to obtain sensitive information by exploiting the vulnerability using man-in-the-middle techniques. The vulnerability is caused by sending network requests over an insecure channel.

Recommendations For IBM Storage Defender versions 2.0.0 through 2.0.7, consider disabling the defender-sensor-cmd CLI until a patch is available to prevent remote attackers from obtaining sensitive information. Restrict access to the on-prem defender-sensor-cmd to minimize the risk of exploitation. Avoid using the affected CLI to send network requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

BDU:2025-00941

CVE-2024-38325

Affected Products

Ibm Storage Defender

References · 8

• https://ibm.com/support/pages/node/7168640 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38325 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38325 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00941 · Security Note
• https://twitter.com/CVEnew/status/1883901667659178210 · Twitter Post
• https://ibm.com/docs/en/storage-defender/base?topic=detection-storage-defender-sensor · Note
• https://t.me/cvedetector/16466 · Telegram Post
• https://t.me/cveNotify/132334 · Telegram Post