CVE-2023-38010: Multiple Vulnerabilities in IBM Cloud Pak System
Published Jan 30, 2026
·Updated
IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system.
Affected Software
17 affected components
IBM Cloud Pak System>=2.3.4.0<2.3.6.0
IBM Os Image For Red Hat Linux Systems>=4.0.4.0<5.0.1.0
IBM Cloud Pak System<=2.3.4.0
IBM Cloud Pak System<=2.3.4.1
2.3.4.1 ifix1
IBM Cloud Pak System<=2.3.5.0
IBM Cloud Pak System<=2.3.6.0
IBM Cloud Pak System=2.3.4.0
IBM Cloud Pak System=2.3.4.1
IBM Cloud Pak System=2.3.4.1-ifix1
IBM Cloud Pak System=2.3.5.0
IBM Cloud Pak System=2.3.6.0
IBM OS Image for Red Hat Linux Systems=4.0.4.0
IBM OS Image for Red Hat Linux Systems=4.0.5.0
IBM OS Image for Red Hat Linux Systems=4.0.6.0
IBM OS Image for Red Hat Linux Systems=4.0.7.0
IBM OS Image for Red Hat Linux Systems=5.0.0.0
IBM OS Image for Red Hat Linux Systems=5.0.1.0
Remediation
Information
IBM strongly recommends addressing the vulnerabilities now by http://www.ibm.com/support/docview.wss?uid=ibm10887959
For unsupported versions the recommendation is to upgrade to a supported version of the product.
Event History
Jan 30, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Feb 4, 2026
CVE Published
via MITRE·08:24 PM
Data Sourced
via MITRE·08:24 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-38010?
CVE-2023-38010 is considered a critical vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2023-38010?
To fix CVE-2023-38010, apply the latest updates and patches provided by IBM for affected versions.
3
What systems are affected by CVE-2023-38010?
CVE-2023-38010 affects IBM Cloud Pak System versions between 2.3.4.0 and 2.3.6.0, as well as certain versions of IBM OS Image for Red Hat Linux Systems.
4
What type of information is exposed by CVE-2023-38010?
CVE-2023-38010 can expose sensitive user messages that could help an attacker launch further attacks.
5
Is CVE-2023-38010 applicable to older versions?
Yes, CVE-2023-38010 is applicable to versions of IBM Cloud Pak System and OS Image for Red Hat Linux Systems that are below specified thresholds.