IBM Cloud Pak System Software Suite vulnerabilities

2 vulnerabilities

Known vulnerabilities in IBM Cloud Pak System Software Suite, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.2CVE-2020-4914ibmcloud pak system+1
EPSS score
0.15%
IBM Cloud Pak System Suite 2.3.3.0 through 2.3.3.5 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 191290.6.5CVE-2023-37405ibmcloud pak system+1
EPSS score
0.24%
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user.