PT-2025-1440 · Ibm · Ibm Cloud Pak System
Published
2025-01-25
·
Updated
2025-08-13
·
CVE-2023-38013
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Cloud Pak System versions 2.3.3.0 through 2.3.3.7 iFix1
Description
The issue is related to the disclosure of sensitive information in HTTP responses, which could aid in further attacks against the system. This could allow a remote attacker to gain unauthorized access to protected information. The vulnerability is associated with the transmission of data and could potentially be exploited to obtain sensitive information.
Recommendations
For IBM Cloud Pak System versions 2.3.3.0 through 2.3.3.7 iFix1, consider restricting access to sensitive information and limiting the amount of data transmitted in HTTP responses until a patch is available. As a temporary workaround, review and modify the system's configuration to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Cloud Pak System