← CVE Intelligence

CVE-2023-38265

Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ] PUBLISHED

Description (CNA)

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system.

Affected (CNA)

Vendor / productVersions
IBM / Cloud Pak Systemaffected 2.3.3.6 through 2.1.0; affected 2.3.3.7; affected 2.3.4.0; affected 2.3.4.1; affected 2.3.5.0

CWE

CWE-548

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.