Description
IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.
Published: 2026-07-28
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by https://www.ibm.com/support/pages/node/7274228 For unsupported versions the recommendation is  to upgrade to supported version of the product.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 28 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Description IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.
Title Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []
First Time appeared Ibm
Ibm cloud Pak System
Weaknesses CWE-798
CPEs cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm cloud Pak System
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Ibm Cloud Pak System
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-07-28T20:53:36.452Z

Reserved: 2026-06-26T20:09:45.350Z

Link: CVE-2026-13463

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-798

    Use of Hard-coded Credentials