← Vulnerability feed

Vulnerability record · CVE-2024-38320 · published 27 January 2025

CVE-2024-38320: Ibm storage protect for virtual environments broken cryptographic algorithm vulnerability

Ibm · Storage Protect For Virtual Environments

IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

7.5 CVSS 3.1 High EPSS 0.23% · top 87.8% CWE-327 · Broken cryptographic algorithm
7.5CVSS 3.1 base score
0.23%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.ibm.com/support/pages/node/7173462 Vendor Advisory
https://www.ibm.com/support/pages/node/7173465 Vendor Advisory

Track CVE-2024-38320 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-13473Ibm storage protect heap-based buffer overflow vulnerabilityIBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer o…EPSS 0.67%9.1CVE-2026-12628Ibm storage protect hard-coded credentials vulnerabilityIBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 could allow a remote attacker…EPSS 0.63%7.8CVE-2023-35897Ibm storage protect code injection vulnerabilityIBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments 8.1.0.0 through 8.1.19.0 could allow a local user to execute arbitrary c…EPSS 0.24%7.7CVE-2024-38329Ibm storage protect for virtual environments incorrect authorization vulnerabilityIBM Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 through 8.1.22.0 could allow a remote authenticated attacker to bypa…EPSS 0.47%4.4CVE-2023-40368Ibm storage protect information exposure vulnerabilityIBM Storage Protect 8.1.0.0 through 8.1.19.0 could allow a privileged user to obtain sensitive information from the administrative command line clien…EPSS 0.20%

Source: NIST National Vulnerability Database (record CVE-2024-38320), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.