PT-2025-13389 · Ibm · Ibm Cloud Pak System

Published 2025-03-27 · Updated 2025-08-18 · CVE-2023-38272

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak System versions 2.3.3.0 through 2.3.4.1

Description The issue could allow a user with access to the network to obtain sensitive information from CLI arguments.

Recommendations For versions 2.3.3.0 through 2.3.4.1, consider restricting access to the network to minimize the risk of exploitation. As a temporary workaround, consider disabling the use of sensitive CLI arguments until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-300

Related Identifiers

CVE-2023-38272

Affected Products

Ibm Cloud Pak System

References · 8

• https://osv.dev/vulnerability/CVE-2023-38272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38272 · Security Note
• https://t.me/cvedetector/21337 · Telegram Post
• https://t.me/cveNotify/132635 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1905326506995220616 · Twitter Post
• https://twitter.com/CVEnew/status/1905361805976670322 · Twitter Post
• https://t.me/cvetracker/20101 · Telegram Post
• https://ibm.com/support/pages/node/7229212 · Vendor Advisory, Patch