CVE-2023-38005

I

BM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could allow an authenticated user to perform unauthorized tasks due to improper access controls.

References
Link Resource
https://www.ibm.com/support/pages/node/7259955 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:-:*:*:*:*:*:*

History

20 Feb 2026, 18:02

Type Values Removed Values Added
First Time Ibm cloud Pak System
Ibm
References () https://www.ibm.com/support/pages/node/7259955 - () https://www.ibm.com/support/pages/node/7259955 - Vendor Advisory
CPE cpe:2.3:a:ibm:cloud_pak_system:2.3.3.7:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.4.1:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.5.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.4.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_system:2.3.3.6:-:*:*:*:*:*:*
CWE NVD-CWE-noinfo

18 Feb 2026, 17:51

Type Values Removed Values Added
Summary
  • (es) IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, y 2.3.5.0 podría permitir a un usuario autenticado realizar tareas no autorizadas debido a controles de acceso inadecuados.

17 Feb 2026, 22:18

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-17 22:18

Updated : 2026-02-20 18:02


NVD link : CVE-2023-38005

Mitre link : CVE-2023-38005

CVE.ORG link : CVE-2023-38005


JSON object : View

Products Affected
CWE
CWE-284

Improper Access Control

NVD-CWE-noinfo