Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-38013 EUVD-2023-41840GHSA-m2fr-34qc-xrjj

IBM Cloud Pak System information disclosure

Published Jan 25, 2025 · Updated Jan 27, 2025 · Assigned by ibm

Vendor: IBM Product: Cloud Pak System

Description

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information in HTTP responses that could aid in further attacks against the system.

Affected products

VendorProductAffectedFixed
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1 —

References