IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user.
Metrics
Affected Vendors & Products
Configuration 1 [-]
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-41306 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7229212 |
|
History
Tue, 19 Aug 2025 04:00:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ibm cloud Pak System Software Suite
|
|
| CPEs | cpe:2.3:a:ibm:cloud_pak_system:2.3.3.0:-:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.3:-:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.4:-:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.5:-:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:-:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:-:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:-:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system_software_suite:2.3.2.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm cloud Pak System Software Suite
|
Fri, 28 Mar 2025 03:15:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Fri, 28 Mar 2025 02:30:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user. | |
| Title | IBM Cloud Pak System information disclosure | |
| First Time appeared |
Ibm
Ibm cloud Pak System |
|
| Weaknesses | CWE-311 | |
| CPEs | cpe:2.3:a:ibm:cloud_pak_system:2.3.1.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.3:ifix1:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:ifix1:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:ifix2:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:ifix1:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm cloud Pak System |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2025-08-17T01:14:54.449Z
Reserved: 2023-07-05T15:59:16.996Z
Link: CVE-2023-37405
Vulnrichment
Updated: 2025-03-27T18:11:19.235Z
NVD
Status : Analyzed
Published: 2025-03-27T18:17:28.463
Modified: 2025-08-18T18:46:32.490
Link: CVE-2023-37405
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses