VULNERABILITY INTELLIGENCE
CVE-2023-38013
CVSS score5.3 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2025-01-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could disclose sensitive information in HTTP responses that could aid in further attacks against the system.
Weakness classification
- psirt@us.ibm.com: CWE-201
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@us.ibm.com — Vendor Advisory