CVE-2023-38272

published 2025-03-27

CVE-2023-38272: IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1

could allow a user with access to the network to obtain sensitive information from CLI arguments.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—

CWE-300