← Back

CVE-2023-38265

nvd nist
Published: Feb 17, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system.

Affected (5)

Ibm
1 product
Cloud Pak System
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Cloud Pak System
Version 2.3.3.6
Cloud Pak System
Version 2.3.3.7
Cloud Pak System
Version 2.3.4.0
Cloud Pak System
Version 2.3.4.1
Cloud Pak System
Version 2.3.5.0

Related CWEs

CWE-548
Exposure of Information Through Directory Listing
A directory listing is inappropriately exposed, yielding potentially sensitive information to attackers.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.