CVE-2023-38272
MEDIUMIBM Cloud Pak System <2.3.4.1 - Info Disclosure
Title source: llmDescription
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments.
Scores
CVSS v3
5.9
EPSS
0.0017
EPSS Percentile
37.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-300
Status
published
Affected Products (13)
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
ibm/cloud_pak_system
Timeline
Published
Mar 27, 2025
Tracked Since
Feb 18, 2026