CVE-2023-46175

Published: Sep 26, 2024Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user.

Affected (9)

Products: Ibm: Cloud Pak For Multicloud Management Monitoring

Ibm

1 product

Cloud Pak For Multicloud Management Monitoring

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack1
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack2
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack3
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack4
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack5
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack6
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack7
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack8

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://www.ibm.com/support/pages/node/7170411

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.