Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | Cloud Pak System | unaffected |
|
|||||||||||||||||||||
| IBM | OS Image for Red Hat Linux Systems | unaffected |
|
No data.
No data.
No data.
No advisories yet.
Solution
IBM strongly recommends addressing the vulnerabilities now by http://www.ibm.com/support/docview.wss?uid=ibm10887959 For unsupported versions the recommendation is to upgrade to a supported version of the product.
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7254419 |
|
Wed, 04 Feb 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 04 Feb 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Cloud Pak System 2.3.4.0, 2.3.4.1, 2.3.4.1 Interim Fix 001, 2.3.5.0, and 2.3.6.0 and IBM OS Image for Red Hat Linux Systems 4.0.4.0, 4.0.5.0, 4.0.6.0, 4.0.7.0, 5.0.0.0, and 5.0.1.0 displays sensitive information in user messages that could aid in further attacks against the system. | IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system. |
Wed, 04 Feb 2026 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Cloud Pak System 2.3.4.0, 2.3.4.12.3.4.1 Interim Fix 001, 2.3.5.0, and 2.3.6.0 and IBM OS Image for Red Hat Linux Systems 4.0.4.04.0.5.04.0.6.04.0.7.0, and 5.0.0.05.0.1.0 displays sensitive information in user messages that could aid in further attacks against the system. | IBM Cloud Pak System 2.3.4.0, 2.3.4.1, 2.3.4.1 Interim Fix 001, 2.3.5.0, and 2.3.6.0 and IBM OS Image for Red Hat Linux Systems 4.0.4.0, 4.0.5.0, 4.0.6.0, 4.0.7.0, 5.0.0.0, and 5.0.1.0 displays sensitive information in user messages that could aid in further attacks against the system. |
| First Time appeared |
Ibm
Ibm cloud Pak System |
|
| CPEs | cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:ifix1:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm cloud Pak System |
Wed, 04 Feb 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Cloud Pak System 2.3.4.0, 2.3.4.12.3.4.1 Interim Fix 001, 2.3.5.0, and 2.3.6.0 and IBM OS Image for Red Hat Linux Systems 4.0.4.04.0.5.04.0.6.04.0.7.0, and 5.0.0.05.0.1.0 displays sensitive information in user messages that could aid in further attacks against the system. | |
| Title | Multiple Vulnerabilities in IBM Cloud Pak System | |
| Weaknesses | CWE-209 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-02-04T20:49:00.786Z
Reserved: 2023-07-11T17:33:11.276Z
Link: CVE-2023-38010
Vulnrichment
Updated: 2026-02-04T20:47:25.255Z
NVD
Status : Received
Published: 2026-02-04T21:15:55.890
Modified: 2026-02-04T21:15:55.890
Link: CVE-2023-38010
Redhat
No data.
OpenCVE Enrichment
No data.