CVE-2023-37405

Опубликовано: 27 мар. 2025

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user.

Ссылки

https://www.ibm.com/support/pages/node/7229212
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cloud_pak_system:2.3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.3:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.3:ifix1:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.4:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.5:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:ifix1:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:ifix2:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:ifix1:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_pak_system_software_suite:2.3.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.00039

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-311

Связанные уязвимости

GHSA-56r2-5qqm-ppfv