VulnSocial

CVE-2023-38005Disclosure(ibm / cloud_pak_system)

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could allow an authenticated user to perform unauthorized tasks due to improper access controls.

ibm CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cloud_pak_system

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-02-17); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
ibm
Products
cloud_pak_system

5 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-17: 1Mentions · 2026-02-18: 1Technical Details · 2026-02-17: 102-1702-18
Signal classification1 categories
Disclosure
2100.0%
Referenced assets3 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2023-38005 Privilege Escalation Vulnerability in IBM Cloud Pak System Versio... https://vulmon.com/vulnerabilitydetails?qid=CVE-2023-38005 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4

    Post summary

    The tweet announces CVE-2023-38005, a privilege escalation flaw in IBM Cloud Pak System, and links to VulMon for additional details, but provides no further technical or exploitation information.

    0001078
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2023-38005 IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could allow an authenticated user to perform unauthorized tasks due to improper access controls. https://www.cve.org/CVERecord?id=CVE-2023-38005

    Post summary

    The message announces that CVE‑2023‑38005 affects IBM Cloud Pak System versions 2.3.3.6 through 2.3.5.0, allowing authenticated users to perform unauthorized tasks because of improper access controls.

    00010147
    56.4K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
Appibmcloud_pak_system2.3.3.6--
Appibmcloud_pak_system2.3.3.7--
Appibmcloud_pak_system2.3.4.0--
Appibmcloud_pak_system2.3.4.1--
Appibmcloud_pak_system2.3.5.0--

Explore more

Back to dashboardibm CVEscloud_pak_system vulnerabilities