IBM Cloud Pak System Sensitive Information Disclosure Vulnerability

A vulnerability exists in IBM Cloud Pak System versions 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1. This vulnerability could allow an authenticated user to access sensitive information from log files, which may aid in further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, potentially facilitating additional attacks against the system.

Remediation

Users are advised to upgrade to IBM Cloud Pak System v2.3.4.0 for Intel or v2.3.5.0 for Power. Instructions for downloading these versions are available on IBM Fix Central. For unsupported versions, it is recommended to upgrade to a supported version of the product.