CVEvulnerability

CVE-2023-37405

6.5 MEDIUM Published 2025-03-27 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-03-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-311

Description

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user.

Affected configurations

• ibm cloud pak system 2.3.1.1 • ibm cloud pak system 2.3.3.0 • ibm cloud pak system 2.3.3.3 • ibm cloud pak system 2.3.3.4 • ibm cloud pak system 2.3.3.5 • ibm cloud pak system 2.3.3.6 • ibm cloud pak system 2.3.3.7 • ibm cloud pak system 2.3.4.0 • ibm cloud pak system 2.3.4.1 • ibm cloud pak system software suite 2.3.2.0

Related

Weakness · CWE (1)

  • CWE-311 Missing Encryption of Sensitive Data weakness

References