CVE-2023-38265

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2026-02-17

Last modified

2026-02-17

Weaknesses

CWE-548

Affected products

• Cloud Pak System (Ibm)

References

• https://www.ibm.com/support/pages/node/7259955