VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 17, 2026· Updated Feb 17, 2026

Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]

CVE-2023-38265

Description

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system.

Affected products

2
  • IBM/Cloud Pak Systemv5
    cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:*:*:*:*:*:*:*
    Range: 2.3.3.6
  • IBM/Cloud Pak Systemllm-fuzzy
    Range: >=2.3.3.6 <=2.3.5.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.