Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-38271 EUVD-2023-42091GHSA-jfx2-4jj8-x2wj

IBM Cloud Pak System information disclosure

Published Jan 25, 2025 · Updated Jan 27, 2025 · Assigned by ibm

Vendor: IBM Product: Cloud Pak System

Description

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could allow an authenticated user to obtain sensitive information from log files.

Affected products

VendorProductAffectedFixed
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1 —

References