CVE-2023-38005

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could allow an authenticated user to perform unauthorized tasks due to improper access controls.
References
Link Resource
https://www.ibm.com/support/pages/node/7259955 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:-:*:*:*:*:*:*

History

20 Feb 2026, 18:02

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7259955 - () https://www.ibm.com/support/pages/node/7259955 - Vendor Advisory
CWE NVD-CWE-noinfo
First Time Ibm cloud Pak System
Ibm
CPE cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:-:*:*:*:*:*:*

18 Feb 2026, 17:51

Type Values Removed Values Added
Summary
  • (es) IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, y 2.3.5.0 podría permitir a un usuario autenticado realizar tareas no autorizadas debido a controles de acceso inadecuados.

17 Feb 2026, 22:18

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-17 22:18

Updated : 2026-02-20 18:02


NVD link : CVE-2023-38005

Mitre link : CVE-2023-38005

CVE.ORG link : CVE-2023-38005


JSON object : View

Products Affected

ibm

  • cloud_pak_system
CWE
CWE-284

Improper Access Control

NVD-CWE-noinfo