7.5
CVE-2023-38272
- EPSS 0.23%
- Veröffentlicht 27.03.2025 17:21:08
- Zuletzt bearbeitet 18.08.2025 12:46:11
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
IBM Cloud Pak System information disclosure
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Cloud Pak System Version2.3.1.1 Update-
Ibm ≫ Cloud Pak System Version2.3.3.0 Update-
Ibm ≫ Cloud Pak System Version2.3.3.3 Update-
Ibm ≫ Cloud Pak System Version2.3.3.3 Updateifix1
Ibm ≫ Cloud Pak System Version2.3.3.4 Update-
Ibm ≫ Cloud Pak System Version2.3.3.5 Update-
Ibm ≫ Cloud Pak System Version2.3.3.6 Update-
Ibm ≫ Cloud Pak System Version2.3.3.6 Updateifix1
Ibm ≫ Cloud Pak System Version2.3.3.6 Updateifix2
Ibm ≫ Cloud Pak System Version2.3.3.7 Update-
Ibm ≫ Cloud Pak System Version2.3.3.7 Updateifix1
Ibm ≫ Cloud Pak System Version2.3.4.0 Update-
Ibm ≫ Cloud Pak System Version2.3.4.1 Update-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.23% | 0.461 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| psirt@us.ibm.com | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-300 Channel Accessible by Non-Endpoint
The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.