CVE-2023-38012

Summary

CVE-2023-38012 is a vulnerability affecting multiple versions of IBM Cloud Pak System, including 2.3.3.6, iFix1, 2.3.3.6 iFix2, 2.3.3.7, iFix1, and 2.3.4.0. This issue allows a remote attacker to traverse directories by sending a specially crafted URL request with "dot dot" sequences (/../). By exploiting this vulnerability, the attacker could potentially gain unauthorized access to arbitrary files on the system. This could lead to sensitive information disclosure or even system compromise. It is recommended that affected organizations apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.