Cryptographic Vulnerability in IBM Storage Protect for Virtual Environments
CVE-2024-38320

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Storage Protect For Virtual Environments: Data Protection For Vmware
Storage Protect Backup-archive Client
Vendor
CVE Published:
27 January 2025

Summary

IBM Storage Protect for Virtual Environments, including the Data Protection for VMware and the Backup-Archive Client versions 8.1.0.0 through 8.1.23.0, utilizes cryptographic algorithms that are weaker than expected. This vulnerability may allow an unauthorized attacker to decrypt highly sensitive information, posing a significant risk to the confidentiality of the data being protected.

Affected Version(s)

Storage Protect Backup-Archive Client 8.1.0.0 <= 8.1.23.0

Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 <= 8.1.23.0

References

https://www.ibm.com/support/pages/node/7173465
vendor-advisory
https://www.ibm.com/support/pages/node/7173462
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.