IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.  IBM X-Force ID:  278749.
                
            References
                    | Link | Resource | 
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/278749 | VDB Entry Vendor Advisory | 
| https://www.ibm.com/support/pages/node/7115261 | Patch Vendor Advisory | 
| https://exchange.xforce.ibmcloud.com/vulnerabilities/278749 | VDB Entry Vendor Advisory | 
| https://www.ibm.com/support/pages/node/7115261 | Patch Vendor Advisory | 
Configurations
                    History
                    21 Nov 2024, 08:56
| Type | Values Removed | Values Added | 
|---|---|---|
| CVSS | 
        v2 :  v3 :  | 
    
        v2 : unknown
         v3 : 6.2  | 
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/278749 - VDB Entry, Vendor Advisory | |
| References | () https://www.ibm.com/support/pages/node/7115261 - Patch, Vendor Advisory | 
15 Feb 2024, 04:38
| Type | Values Removed | Values Added | 
|---|---|---|
| First Time | 
        
        Ibm
         Ibm storage Defender Resiliency Service  | 
|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/278749 - VDB Entry, Vendor Advisory | |
| References | () https://www.ibm.com/support/pages/node/7115261 - Patch, Vendor Advisory | |
| CVSS | 
        v2 :  v3 :  | 
    
        v2 : unknown
         v3 : 7.8  | 
| CPE | cpe:2.3:a:ibm:storage_defender_resiliency_service:2.0:*:*:*:*:*:*:* | 
10 Feb 2024, 16:15
| Type | Values Removed | Values Added | 
|---|---|---|
| New CVE | 
Information
                Published : 2024-02-10 16:15
Updated : 2024-11-21 08:56
NVD link : CVE-2024-22313
Mitre link : CVE-2024-22313
CVE.ORG link : CVE-2024-22313
JSON object : View
Products Affected
                ibm
- storage_defender_resiliency_service
 
CWE
                
                    
                        
                        CWE-798
                        
            Use of Hard-coded Credentials
