CVEvulnerability
CVE-2023-38713
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-01-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-209
Description
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information about the system that could aid in further attacks against the system.
Affected configurations
• ibm cloud pak system 2.3.0.0
• ibm cloud pak system 2.3.3.0
• ibm cloud pak system 2.3.3.3
• ibm cloud pak system 2.3.3.4
• ibm cloud pak system 2.3.3.5
• ibm cloud pak system 2.3.3.6
• ibm cloud pak system 2.3.3.7
Related
Weakness · CWE (1)
- CWE-209 Generation of Error Message Containing Sensitive Information weakness
References
- https://www.ibm.com/support/pages/node/7159533 Vendor Advisory