← CVE Intelligence

CVE-2023-38017

Multiple Vulnerabilities in IBM Cloud Pak System PUBLISHED

Description (CNA)

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected (CNA)

Vendor / productVersions
IBM / Cloud Pak Systemaffected 2.3.4.0; affected 2.3.4.1; affected 2.3.4.1 Interim Fix 001; affected 2.3.5.0; affected 2.3.6.0
IBM / OS Image for Red Hat Linux Systemsaffected 4.0.4.0; affected 4.0.5.0; affected 4.0.6.0; affected 4.0.7.0; affected 5.0.0.0; affected 5.0.1.0

CWE

CWE-209

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.