Vulnerability-Lookup

FKIE_CVE-2023-38010

Vulnerability from fkie_nvd - Published: 2026-02-04 21:15 - Updated: 2026-02-25 15:09

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system.

References

	URL	Tags
	psirt@us.ibm.com	https://www.ibm.com/support/pages/node/7254419	Vendor Advisory

Impacted products

Vendor	Product	Version
ibm	cloud_pak_system	2.3.4.0
ibm	cloud_pak_system	2.3.4.1
ibm	cloud_pak_system	2.3.4.1
ibm	cloud_pak_system	2.3.5.0
ibm	cloud_pak_system	2.3.6.0
ibm	os_image_for_red_hat_linux_systems	4.0.4.0
ibm	os_image_for_red_hat_linux_systems	4.0.5.0
ibm	os_image_for_red_hat_linux_systems	4.0.6.0
ibm	os_image_for_red_hat_linux_systems	4.0.7.0
ibm	os_image_for_red_hat_linux_systems	5.0.0.0
ibm	os_image_for_red_hat_linux_systems	5.0.1.0

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "1A007FD5-CF3B-4DC0-B8C0-3D04AF411FD3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:-:*:*:*:*:*:*",
              "matchCriteriaId": "618F4D77-242C-415C-AA3F-4F79C2663178",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:ifix1:*:*:*:*:*:*",
              "matchCriteriaId": "B793F9B0-02DE-49D1-8134-4691A7DC855D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "118829A2-1826-41FE-9F64-698B8FBCF8BB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "6E358741-BF0B-41C0-9015-1EE584AAE2CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:4.0.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "580A034F-3E53-48E4-84C1-4715280A709C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:4.0.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FA52F21-D880-4197-A111-858965D7994E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:4.0.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "51F9C7ED-566B-4E5E-B95F-1A6EDB578244",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:4.0.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2003856-FECF-4671-8378-441079B70923",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:5.0.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3863C1D-EC74-4980-86B6-932E7A84DA2C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:os_image_for_red_hat_linux_systems:5.0.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "244322C7-51AF-4CB9-A9D8-874A4288767B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system."
    },
    {
      "lang": "es",
      "value": "IBM Cloud Pak System muestra informaci\u00f3n sensible en mensajes de usuario que podr\u00eda ayudar en ataques posteriores contra el sistema."
    }
  ],
  "id": "CVE-2023-38010",
  "lastModified": "2026-02-25T15:09:47.457",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "psirt@us.ibm.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2026-02-04T21:15:55.890",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.ibm.com/support/pages/node/7254419"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-209"
        }
      ],
      "source": "psirt@us.ibm.com",
      "type": "Primary"
    }
  ]
}

CVE-2023-38010 (GCVE-0-2023-38010)

Vulnerability from cvelistv5 – Published: 2026-02-04 20:24 – Updated: 2026-02-04 20:49

Title

Multiple Vulnerabilities in IBM Cloud Pak System

Summary

IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system.

Severity ?

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-209 - Generation of Error Message Containing Sensitive Information

Assigner

ibm

References

URL

Tags

https://www.ibm.com/support/pages/node/7254419

vendor-advisorypatch

Impacted products

Vendor

Product

Version

IBM

Cloud Pak System

Affected: 2.3.4.0 (semver)
Affected: 2.3.4.1 (semver)
Affected: 2.3.4.1 Interim Fix 001 (semver)
Affected: 2.3.5.0
Affected: 2.3.6.0
    cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:ifix1:*:*:*:*:*:*
    cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:*:*:*:*:*:*:*

IBM

OS Image for Red Hat Linux Systems

Affected: 4.0.4.0
Affected: 4.0.5.0
Affected: 4.0.6.0
Affected: 4.0.7.0
Affected: 5.0.0.0
Affected: 5.0.1.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-38010",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-04T20:48:48.904709Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-04T20:49:00.786Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:ifix1:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Cloud Pak System",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.4.0",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "2.3.4.1",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "2.3.4.1 Interim Fix 001",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "2.3.5.0"
            },
            {
              "status": "affected",
              "version": "2.3.6.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "OS Image for Red Hat Linux Systems",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.4.0"
            },
            {
              "status": "affected",
              "version": "4.0.5.0"
            },
            {
              "status": "affected",
              "version": "4.0.6.0"
            },
            {
              "status": "affected",
              "version": "4.0.7.0"
            },
            {
              "status": "affected",
              "version": "5.0.0.0"
            },
            {
              "status": "affected",
              "version": "5.0.1.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system.\u003c/p\u003e"
            }
          ],
          "value": "IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-209",
              "description": "CWE-209 Generation of Error Message Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-04T20:46:18.289Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7254419"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerabilities now by \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/pages/node/7254396\"\u003eupgrading to version 2.3.6.1\u003c/a\u003e\u003c/strong\u003e\u003cstrong\u003e. \u003c/strong\u003e\u003c/p\u003e\u003cp\u003eIBM Cloud Pak System provides OS image for Red Hat Enterprise Linux System 4.0.8.0 based on Red Hat Enterprise Linux 8.10 and OS image for Red Hat Enterprise Linux System 5.0.3 based on Red Hat Enterprise Linux 9.6. IBM Cloud Pak System provides IBM WebSphere Application Server Liberty V25.0.0.9; IBM Storage Scale is also upgraded to IBM Storage Scale V5.2.3.3.\u003c/p\u003e\u003cp\u003eFor Power, contact IBM Support.\u003c/p\u003e\u003cp\u003eThis Security bulletin applies to IBM Cloud Pak System, IBM Cloud Pak System Software, and IBM Cloud Pak System Software Suite.\u003c/p\u003e\u003cp\u003eInformation on upgrading here \u003ca target=\"_blank\" rel=\"nofollow\" href=\"http://www.ibm.com/support/docview.wss?uid=ibm10887959\"\u003ehttp://www.ibm.com/support/docview.wss?uid=ibm10887959\u003c/a\u003e\u003c/p\u003e\u003c/div\u003e\u003cp\u003eFor unsupported versions the recommendation is to upgrade to a supported version of the product.\u003c/p\u003e\u003cbr\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerabilities now by  http://www.ibm.com/support/docview.wss?uid=ibm10887959 \n\n\n\nFor unsupported versions the recommendation is to upgrade to a supported version of the product."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Multiple Vulnerabilities in IBM Cloud Pak System",
      "x_generator": {
        "engine": "ibm-cvegen"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2023-38010",
    "datePublished": "2026-02-04T20:24:56.127Z",
    "dateReserved": "2023-07-11T17:33:11.276Z",
    "dateUpdated": "2026-02-04T20:49:00.786Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2023-38010

CVE-2023-38010 (GCVE-0-2023-38010)

Tags

Sightings

Nomenclature