Description (CNA)
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Storage Defender - Resiliency Service | affected 2.0.0 through 2.0.7 |
CWE
CWE-297
References
ADP enrichment
No English description supplied.
No references supplied.