← Back

CVE-2023-37405

nvd nist
Published: Mar 27, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user.

Affected (14)

Ibm
2 products
Cloud Pak System
Cloud Pak System Software Suite
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Cloud Pak System
Version 2.3.1.1
Cloud Pak System
Version 2.3.3.0
Cloud Pak System
Version 2.3.3.3
Cloud Pak System
Version 2.3.3.3 ifix1
Cloud Pak System
Version 2.3.3.4
Cloud Pak System
Version 2.3.3.5
Cloud Pak System
Version 2.3.3.6
Cloud Pak System
Version 2.3.3.6 ifix1
Cloud Pak System
Version 2.3.3.6 ifix2
Cloud Pak System
Version 2.3.3.7
Cloud Pak System
Version 2.3.3.7 ifix1
Cloud Pak System
Version 2.3.4.0
Cloud Pak System
Version 2.3.4.1
Cloud Pak System Software Suite
Version 2.3.2.0

Related CWEs

CWE-311
Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.