Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-38005

Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]

Description

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could allow an authenticated user to perform unauthorized tasks due to improper access controls.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Cloud Pak System

  • 2.3.3.6 to ≤ 2.1.0affected
  • 2.3.3.7affected
  • 2.3.4.0affected
  • 2.3.4.1affected
  • 2.3.5.0affected

References