Lucene search
+L

5 matches found

NVD
NVD
added 2025/03/27 6:17 p.m.18 views

CVE-2023-38272

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments...

7.5CVSS0.00326EPSS
Exploits0References1
CVE
CVE
added 2025/03/27 5:21 p.m.58 views

CVE-2023-38272

IBM Cloud Pak System vulnerabilities CVE-2023-38272 affect versions 2.3.3.0 through 2.3.4.1. The issue could allow a user with network access to read sensitive information from CLI arguments, indicating a information disclosure flaw in CLI handling. The connected IBM bulletin confirms the impact ...

7.5CVSS5.4AI score0.00326EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/27 5:21 p.m.16 views

CVE-2023-38272 IBM Cloud Pak System information disclosure

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments...

5.9CVSS5.5AI score0.00326EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 5:21 p.m.16 views

CVE-2023-38272 IBM Cloud Pak System information disclosure

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments...

5.9CVSS0.00326EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/27 1:51 a.m.15 views

Security Bulletin: IBM Cloud Pak System cli is vulnerable to sensitive information exposure

Summary IBM Cloud Pak System cli is vulnerable to sensitive information exposure. CVE-2023-37405, CVE-2023-38272 Vulnerability Details CVEID:CVE-2023-37405 DESCRIPTION: IBM Cloud Pak System stores sensitive data in memory, that could be obtained by an unauthorized user. CWE:CWE-311: Missing...

6.5CVSS6.2AI score0.00326EPSS
Exploits0Affected Software1
Rows per page
Query Builder