CVE-2023-38716

IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose sensitive information about the system that could aid in further attacks against the system.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7148474	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:-::::::
	cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:ifix1::::::
	cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:ifix2::::::
	cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:-::::::
	cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:ifix1::::::
	cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-::::::

History

No history.

Information

Published : 2025-01-25 14:15

Updated : 2025-08-13 17:52

NVD link : CVE-2023-38716

Mitre link : CVE-2023-38716

CVE.ORG link : CVE-2023-38716

JSON object : View

Products Affected

ibm

cloud_pak_system

CWE

CWE-209

Generation of Error Message Containing Sensitive Information

{"id": "CVE-2023-38716", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-01-25T14:15:28.580", "references": [{"url": "https://www.ibm.com/support/pages/node/7148474", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-209"}]}], "descriptions": [{"lang": "en", "value": "IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose sensitive information about the system that could aid in further attacks against the system."}, {"lang": "es", "value": "IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1 y 2.3.4.0 podr\u00edan revelar informaci\u00f3n confidencial sobre el tallo sistema que podr\u00eda ayudar en futuros ataques contra sistema."}], "lastModified": "2025-08-13T17:52:45.077", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E929D5FD-319D-45FD-85FF-688528762615"}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:ifix1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31C15792-C94C-4599-B32A-287A5B7749A1"}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:ifix2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C056670B-C13D-4E6F-AB80-950A09915DB3"}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AB3D285-C45A-4463-80B1-17A9B6086439"}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:ifix1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AC8B844-D88C-4029-8395-A73853195EC5"}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A007FD5-CF3B-4DC0-B8C0-3D04AF411FD3"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}