← Back

CVE-2023-38013

nvd nist
Published: Jan 25, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information in HTTP responses that could aid in further attacks against the system.

Affected (10)

Ibm
1 product
Cloud Pak System
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Cloud Pak System
Version 2.3.3.0
Cloud Pak System
Version 2.3.3.3
Cloud Pak System
Version 2.3.3.3 ifix1
Cloud Pak System
Version 2.3.3.4
Cloud Pak System
Version 2.3.3.5
Cloud Pak System
Version 2.3.3.6
Cloud Pak System
Version 2.3.3.6 ifix1
Cloud Pak System
Version 2.3.3.6 ifix2
Cloud Pak System
Version 2.3.3.7
Cloud Pak System
Version 2.3.3.7 ifix1

Related CWEs

CWE-201
Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.