Medium · 4.3 CVE-2023-38005 EUVD-2023-41832GHSA-qvc7-4wrw-mpgp

Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]

Published Feb 17, 2026 · Updated Feb 18, 2026 · Assigned by ibm

Description

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could allow an authenticated user to perform unauthorized tasks due to improper access controls.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cloud Pak System	2.3.3.6 – ≤ 2.1.0, 2.3.3.7, 2.3.4.0, 2.3.4.1, 2.3.5.0	—

References

https://www.ibm.com/support/pages/node/7259955 vendor-advisory patch