CVE-2024-52361 IBM Storage Defender - Resiliency Service information disclosure

Medium 5.7 Published 18 Dec 2024 Updated 18 Dec 2024

An authenticated user with pod access can read stored user credentials in plain text, leading to information disclosure.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-52361?

CVE-2024-52361 is a medium-severity vulnerability in IBM Storage Defender - Resiliency Service, published on 18 Dec 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9

stores user credentials in plain text which can be read by an authenticated user with access to the pod.

Weakness: CWE-256

Which versions are affected by CVE-2024-52361?

It affects 1 product.

Products include Ibm Storage Defender Resiliency Service.

How do I fix CVE-2024-52361?

No fix has been published for CVE-2024-52361 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-52361 being exploited?

There is no known exploitation of CVE-2024-52361 in the wild and no public exploit code.

Sources

Also known as GHSA-c7jc-3j2x-59x8.