CVE-2024-38320

published 2025-01-27

CVE-2024-38320: IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than…

Priority P3 40 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	storage_protect	>= 8.1.0.0 < 8.1.24.0	8.1.24.0
ibm	storage_protect_backup-archive_client	8.1.0.0 – 8.1.23.0	—
ibm	storage_protect_for_virtual_environments	>= 8.1.0.0 < 8.1.24.0	8.1.24.0
ibm	storage_protect_for_virtual_environments_data_protection_for_vmware	8.1.0.0 – 8.1.23.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-327