IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-Force ID: 191288.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://www.ibm.com/support/pages/node/6393554 | patch vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/191288 | vdb entry |