IBM Cloud Pak System information disclosure
CVE-2023-38273
7.5HIGH
What is CVE-2023-38273?
The IBM Cloud Pak System is affected by a vulnerability stemming from inadequate account lockout settings, which could be exploited by remote attackers to perform brute force attacks on user account credentials. This flaw presents risks that can lead to unauthorized access and compromise of sensitive information. Organizations utilizing the affected versions of IBM Cloud Pak System should take immediate measures to enhance account security and mitigate potential threats.
Affected Version(s)
Cloud Pak System 2.3.1.1, 2.3.2.0, 2.3.3.7