CVE-2023-38271

Published: Jan 25, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could allow an authenticated user to obtain sensitive information from log files.

Affected (10)

Products: Ibm: Cloud Pak System

Ibm

1 product

Cloud Pak System

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Ibm Cloud Pak System	Version 2.3.3.0
Ibm Cloud Pak System	Version 2.3.3.3
Ibm Cloud Pak System	Version 2.3.3.3 ifix1
Ibm Cloud Pak System	Version 2.3.3.4
Ibm Cloud Pak System	Version 2.3.3.5
Ibm Cloud Pak System	Version 2.3.3.6
Ibm Cloud Pak System	Version 2.3.3.6 ifix1
Ibm Cloud Pak System	Version 2.3.3.6 ifix2
Ibm Cloud Pak System	Version 2.3.3.7
Ibm Cloud Pak System	Version 2.3.3.7 ifix1

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://www.ibm.com/support/pages/node/7159533

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.