CVE-2023-37405

published 2025-03-27

CVE-2023-37405: IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system_software_suite	—	—

CWE-311