CVE-2022-38385: Input Validation
First published: Fri Oct 28 2022(Updated: )
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 233777.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cloud Pak for Security | >=1.10.0.0<=1.10.2.0 | |
| Linux Linux kernel | ||
| IBM Cloud Pak for Security (CP4S) | <=1.10.0.0 - 1.10.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-38385?
CVE-2022-38385 is a vulnerability in IBM Cloud Pak for Security (CP4S) that could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation.
How does CVE-2022-38385 affect IBM Cloud Pak for Security (CP4S)?
CVE-2022-38385 affects IBM Cloud Pak for Security (CP4S) versions 1.10.0.0 through 1.10.2.0, allowing an authenticated user to obtain highly sensitive information or perform unauthorized actions.
What is the severity of CVE-2022-38385?
The severity of CVE-2022-38385 is rated as high, with a severity value of 8.1.
How can I fix CVE-2022-38385?
To fix CVE-2022-38385, users of IBM Cloud Pak for Security (CP4S) should upgrade to a version higher than 1.10.2.0, as this vulnerability was patched in later releases.
Where can I find more information about CVE-2022-38385?
You can find more information about CVE-2022-38385 on the IBM X-Force Exchange website at https://exchange.xforce.ibmcloud.com/vulnerabilities/233777 or on the IBM support page at https://www.ibm.com/support/pages/node/6833586.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm cloud pak for security
- version/ibm cloud pak for security/1.10.0.0
- version/ibm cloud pak for security/1.10.2.0
- vendor/linux
- canonical/linux linux kernel
- canonical/ibm cloud pak for security (cp4s)
- version/ibm cloud pak for security (cp4s)/1.10.0.0 - 1.10.2.0