Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-37405 EUVD-2023-41306GHSA-56r2-5qqm-ppfv

IBM Cloud Pak System information disclosure

Published Mar 27, 2025 · Updated Aug 17, 2025 · Assigned by ibm

Description

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user.

Affected products

VendorProductAffectedFixed
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1 —

References