CVE-2024-38320 describes a weak cryptographic algorithm vulnerability in IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client versions 8.1.0.0 through 8.1.23.0, impacting data confidentiality across various platforms including Apple, HP, IBM, Linux, Microsoft, and Oracle. With a CVSS score of 7.5 (High), this network-exploitable flaw has low attack complexity and could lead to the decryption of highly sensitive information without user interaction. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 8.1.0.0, < 8.1.24.0CPE matchmatch criteria | cpe:2.3:a:ibm:storage_protect_for_virtual_environments:*:*:*:*:*:*:*:* | ||
>= 8.1.0.0, < 8.1.24.0CPE matchmatch criteria | cpe:2.3:a:ibm:storage_protect:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.