PT-2024-13336 · Ibm · Ibm Cloud Pak For Multicloud Management

Published 2024-09-26 · Updated 2025-08-08 · CVE-2023-46175

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Multicloud Management versions 2.3 through 2.3 FP8

Description The issue concerns the storage of user credentials in log files in plain clear text, which can be accessed by a privileged user. This results in the exposure of sensitive information via log files.

Recommendations For IBM Cloud Pak for Multicloud Management versions 2.3 through 2.3 FP8, upgrade the affected component immediately to resolve the issue. As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2023-46175

Affected Products

Ibm Cloud Pak For Multicloud Management

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-46175 · Security Note
• https://ibm.com/support/pages/node/7170411 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-46175 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1839376276102004969 · Twitter Post
• https://twitter.com/CVEnew/status/1839301744926289939 · Twitter Post
• https://twitter.com/oktsec/status/1839343760263545234 · Twitter Post
• https://t.me/cveNotify/131365 · Telegram Post
• https://t.me/cvedetector/6417 · Telegram Post