CVE-2023-38272
Last modified
CVE-2023-38272 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with access to the network to obtain sensitive information from CLI arguments.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Cloud Pak System | 2.3.1.1 |
| Ibm | Cloud Pak System | 2.3.3.0 |
| Ibm | Cloud Pak System | 2.3.3.3 |
| Ibm | Cloud Pak System | 2.3.3.4 |
| Ibm | Cloud Pak System | 2.3.3.5 |
| Ibm | Cloud Pak System | 2.3.3.6 |
| Ibm | Cloud Pak System | 2.3.3.7 |
| Ibm | Cloud Pak System | 2.3.4.0 |
| Ibm | Cloud Pak System | 2.3.4.1 |
References
- https://www.ibm.com/support/pages/node/7229212Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-38272?
How severe is CVE-2023-38272?
How do I fix CVE-2023-38272?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-38264The IBM SDK, Java Technology Edition's Object Request Broker…7.5
- CVE-2023-38265IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and…5.3
- CVE-2023-38267IBM Security Access Manager Appliance (IBM Security Verify A…5.5
- CVE-2023-38268IBM InfoSphere Information Server 11.7 is vulnerable to cros…8.8
- CVE-2023-3827A vulnerability was found in Bug Finder Listplace Directory …6.1
- CVE-2023-38271IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.…6.5
- CVE-2023-38273IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an i…7.5
- CVE-2023-38275IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes se…7.5
- CVE-2023-38276IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes se…7.5
- CVE-2023-3828A vulnerability was found in Bug Finder Listplace Directory …6.1
- CVE-2023-38280IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1…7.8
- CVE-2023-38281IBM Cloud Pak System does not set the secure attribute on au…5.3
Are you affected by CVE-2023-38272?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST