PT-2025-1441 · Ibm · Ibm Cloud Pak System

Published 2025-01-25 · Updated 2025-08-13 · CVE-2023-38271

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak System versions 2.3.3.0 through 2.3.3.7 iFix1

Description The issue allows an authenticated user to obtain sensitive information from log files.

Recommendations For IBM Cloud Pak System versions 2.3.3.0 through 2.3.3.7 iFix1, consider restricting access to log files to minimize the risk of exploitation until a patch is available.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2023-38271

Affected Products

Ibm Cloud Pak System

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-38271 · Security Note
• https://osv.dev/vulnerability/CVE-2023-38271 · Vendor Advisory
• https://ibm.com/support/pages/node/7159533 · Vendor Advisory
• https://twitter.com/CVEnew/status/1883155812455010534 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1883181095866241091 · Twitter Post
• https://t.me/cveNotify/132119 · Telegram Post
• https://t.me/cvedetector/16391 · Telegram Post
• https://t.me/cvenotify/108609 · Telegram Post