IBM Cloud Pak System Information Disclosure Vulnerability (CNVD-2024-07607)

2024-02-0500:00:00

China National Vulnerability Database

www.cnvd.org.cn

ibm cloud pak

converged infrastructure

hybrid clouds

information disclosure

vulnerability

account credentials

exploitation

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

34.3%

JSON

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from International Business Machines (IBM). The product supports deploying, managing and moving application environments across hybrid clouds. An information disclosure vulnerability exists in IBM Cloud Pak System versions 2.3.1.1, 2.3.2.0, and 2.3.3.7, which can be exploited by an attacker to brute-force account credentials.