CVE-2023-38012
IBM Cloud Pak System 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
| Software | From | Fixed in |
|---|---|---|
| ibm / cloud_pak_system | 2.3.3.6 | 2.3.3.6.x |
| ibm / cloud_pak_system | 2.3.3.6-ifix1 | 2.3.3.6-ifix1.x |
| ibm / cloud_pak_system | 2.3.3.7 | 2.3.3.7.x |
| ibm / cloud_pak_system | 2.3.3.7-ifix1 | 2.3.3.7-ifix1.x |
| ibm / cloud_pak_system | 2.3.4.0 | 2.3.4.0.x |
| ibm / cloud_pak_system | 2.3.3.6-ifix2 | 2.3.3.6-ifix2.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime