CVE-2023-38265: Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]
IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system.
Other sources
IBM Cloud Pak System could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-38265?
CVE-2023-38265 has been rated as a high severity vulnerability due to its potential to expose sensitive directory information to unauthenticated attackers.
What vulnerabilities are addressed in CVE-2023-38265?
CVE-2023-38265 addresses improper access control and exposure of information through directory listing vulnerabilities.
Which versions of IBM Cloud Pak System are affected by CVE-2023-38265?
CVE-2023-38265 affects IBM Cloud Pak System versions 2.3.3.6 to 2.3.5.0, including specific prior versions.
How do I fix CVE-2023-38265?
To fix CVE-2023-38265, upgrading to a patched version of IBM Cloud Pak System is recommended.
What are the potential consequences of CVE-2023-38265?
The potential consequences of CVE-2023-38265 include unauthorized access to sensitive folder location information, which could lead to further attacks.