IBM Cloud Pak System Sensitive Information Disclosure Vulnerability

A vulnerability exists in IBM Cloud Pak System versions 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1. This vulnerability could allow the disclosure of sensitive information in HTTP responses, which could be leveraged for further attacks against the system.

Impact

Exploitation of this vulnerability could lead to the unauthorized disclosure of sensitive information, potentially facilitating additional attacks against the system.

Remediation

Users are advised to upgrade to IBM Cloud Pak System v2.3.4.0 for Intel or v2.3.5.0 for Power. Instructions for downloading these versions are available on IBM Fix Central. For unsupported versions, upgrade to a supported version of the product.