IBM Cloud Pak System Sensitive Information Disclosure Vulnerability

A vulnerability exists in IBM Cloud Pak System versions 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1. This vulnerability could lead to the unintentional disclosure of sensitive system information, which might be exploited to conduct further attacks against the system.

Impact

Successful exploitation of this vulnerability could provide an attacker with sensitive information that could be used to compromise the system or its data.

Remediation

Users of IBM Cloud Pak System on Intel should upgrade to version 2.3.4.0. For those on Power, version 2.3.5.0 is recommended. Instructions for upgrading are available on the IBM Support website.