CVE-2024-22312 IBM Storage Defender - Resiliency Service information disclosure
Local attackers can read user credentials stored in plain text within IBM Storage Defender Resiliency Service, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-22312?
CVE-2024-22312 is a medium-severity vulnerability in IBM Storage Defender - Resiliency Service, published on 10 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 278748.
Which versions are affected by CVE-2024-22312?
It affects 1 product.
Products include Ibm Storage Defender Resiliency Service.
How do I fix CVE-2024-22312?
No fix has been published for CVE-2024-22312 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-22312 being exploited?
There is no known exploitation of CVE-2024-22312 in the wild and no public exploit code.
Other vulnerabilities in IBM Storage Defender - Resiliency Service
- CVE-2023-50957 IBM Storage Defender - Resiliency Service privilege escalation
- CVE-2025-64650 IBM Storage Defender - Resiliency Service Information Disclosure
- CVE-2024-27261 IBM Storage Defender - Resiliency Service privilege escalation
- CVE-2024-22313 IBM Storage Defender - Resiliency Service information disclosure
- CVE-2024-22314 IBM Storage Defender - Resiliency Service information disclosure
Sources
Also known as GHSA-6qjv-w5w3-xfr7.