CVE-2025-64650: IBM Storage Defender - Resiliency Service Information Disclosure
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files.
Other sources
IBM Storage Defender - Resiliency Service could disclose sensitive user credentials in log files.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Storage Defender - Resiliency Service Connection Managerto a version that resolves this vulnerability.Fixed in 2.1.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64650?
CVE-2025-64650 has a medium severity level due to the potential exposure of sensitive user credentials.
How do I fix CVE-2025-64650?
To remediate CVE-2025-64650, upgrade IBM Storage Defender - Resiliency Service to version 2.0.19 or later.
What information is disclosed in CVE-2025-64650?
CVE-2025-64650 may disclose sensitive user credentials in log files, which can pose security risks.
Which versions of IBM Storage Defender - Resiliency Service are affected by CVE-2025-64650?
CVE-2025-64650 affects IBM Storage Defender - Resiliency Service versions 2.0.0 through 2.0.18.
Is a patch available for CVE-2025-64650?
Yes, a patch is available by upgrading to IBM Storage Defender - Resiliency Service version 2.0.19 or later.