Description
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
patch
https://www.ibm.com/support/pages/node/7229212
Scores
CVSS v3
5.9
EPSS
0.0023
EPSS Percentile
46.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-300
Status
published
Products (9)
ibm/cloud_pak_system
2.3.1.1
ibm/cloud_pak_system
2.3.3.0
ibm/cloud_pak_system
2.3.3.3 (2 CPE variants)
ibm/cloud_pak_system
2.3.3.4
ibm/cloud_pak_system
2.3.3.5
ibm/cloud_pak_system
2.3.3.6 (3 CPE variants)
ibm/cloud_pak_system
2.3.3.7 (2 CPE variants)
ibm/cloud_pak_system
2.3.4.0
ibm/cloud_pak_system
2.3.4.1
Published
Mar 27, 2025
Tracked Since
Feb 18, 2026