IBM Cloud Pak System Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in IBM Cloud Pak System versions 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0. This vulnerability could expose sensitive system information that might be leveraged for further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, potentially facilitating additional attacks against the system.

Remediation

Users are advised to upgrade to IBM Cloud Pak System v2.3.4.0 or v2.3.5.0, depending on their platform. Instructions for upgrading are available on the IBM Support website.