CVE-2024-38320

IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ibm:storage_protect_for_virtual_environments:*:*:*:*:*:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:ibm:storage_protect:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*

History

18 Aug 2025, 18:05

Type Values Removed Values Added
CPE cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_protect:*:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_protect_for_virtual_environments:*:*:*:*:*:*:*:*
References () https://www.ibm.com/support/pages/node/7173462 - () https://www.ibm.com/support/pages/node/7173462 - Vendor Advisory
References () https://www.ibm.com/support/pages/node/7173465 - () https://www.ibm.com/support/pages/node/7173465 - Vendor Advisory
CVSS v2 : unknown
v3 : 5.9
v2 : unknown
v3 : 7.5
First Time Oracle solaris
Oracle
Linux
Microsoft windows
Ibm storage Protect For Virtual Environments
Apple
Linux linux Kernel
Apple macos
Ibm aix
Hp hp-ux
Hp
Microsoft
Ibm storage Protect
Ibm

27 Jan 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-27 16:15

Updated : 2025-08-18 18:05


NVD link : CVE-2024-38320

Mitre link : CVE-2024-38320


JSON object : View

Products Affected

oracle

  • solaris

hp

  • hp-ux

apple

  • macos

ibm

  • storage_protect_for_virtual_environments
  • storage_protect
  • aix

linux

  • linux_kernel

microsoft

  • windows
CWE
CWE-327

Use of a Broken or Risky Cryptographic Algorithm