PT-2025-1443 · Ibm · Ibm Cloud Pak System

Published 2025-01-25 · Updated 2025-08-13 · CVE-2023-38714

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak System versions 2.3.3.0 through 2.3.3.7 iFix1

Description The issue is related to the error reporting mechanism in IBM Cloud Pak System, which could allow a remote attacker to gain unauthorized access to protected information. This could potentially aid in further attacks against the system.

Recommendations For IBM Cloud Pak System versions 2.3.3.0 through 2.3.3.7 iFix1, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

BDU:2025-01200

CVE-2023-38714

Affected Products

Ibm Cloud Pak System

References · 8

• https://osv.dev/vulnerability/CVE-2023-38714 · Vendor Advisory
• https://ibm.com/support/pages/node/7159533 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01200 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-38714 · Security Note
• https://t.me/cveNotify/132113 · Telegram Post
• https://t.me/cvedetector/16393 · Telegram Post
• https://t.me/cvenotify/108611 · Telegram Post
• https://twitter.com/CVEnew/status/1883155814354936279 · Twitter Post