Description
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 does not properly validate a certificate which could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Storage Defender - Resiliency Service | 2.0.0 – ≤ 2.0.9 | — |
References
- https://www.ibm.com/support/pages/node/7178587 vendor-advisory