CVE-2024-38325

CVE-2024-38325 describes a sensitive information disclosure vulnerability in IBM Storage Defender versions 2.0.0 through 2.0.7, specifically within the on-prem defender-sensor-cmd CLI. This flaw allows a remote attacker to intercept network requests sent over an insecure channel, potentially leading to the compromise of sensitive data via man-in-the-middle attacks. With a CVSS score of 7.5 (HIGH), it has a network attack vector and low attack complexity, enabling an unauthenticated attacker to achieve high confidentiality impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.