Information Disclosure Vulnerability in IBM Cloud Pak System
CVE-2023-38265

5.3MEDIUM

Key Information:

Vendor

IBM
Status
Cloud Pak System
Vendor
CVE Published:
17 February 2026

What is CVE-2023-38265?

The IBM Cloud Pak System contains a vulnerability that could allow an unauthenticated attacker to access sensitive folder location information. This could enable potential malicious activities aimed at compromising the integrity and security of the affected systems. It's crucial for users of specific versions to ensure they are updated and to follow IBM's recommendations to mitigate this risk.

Affected Version(s)

Cloud Pak System 2.3.3.6 <= 2.1.0

Cloud Pak System 2.3.3.7

Cloud Pak System 2.3.4.0

References

https://www.ibm.com/support/pages/node/7259955
vendor-advisorypatch

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.