CVE-2023-38010

MEDIUM

IBM Cloud Pak System - Info Disclosure

Title source: llm

Description

IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system.

References (1)

Scores

CVSS v3 5.3
EPSS 0.0004
EPSS Percentile 11.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-209
Status published

Affected Products (11)

ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/os_image_for_red_hat_linux_systems
ibm/os_image_for_red_hat_linux_systems
ibm/os_image_for_red_hat_linux_systems
ibm/os_image_for_red_hat_linux_systems
ibm/os_image_for_red_hat_linux_systems
ibm/os_image_for_red_hat_linux_systems

Timeline

Published Feb 04, 2026
Tracked Since Feb 18, 2026