Vulnerability Description
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 233777.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Cloud Pak For Security | >= 1.10.0.0, <= 1.10.2.0 |
| Linux | Linux Kernel | - |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/233777VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6833586PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/233777VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6833586PatchVendor Advisory
FAQ
What is CVE-2022-38385?
CVE-2022-38385 is a vulnerability with a CVSS score of 7.1 (HIGH). IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. ...
How severe is CVE-2022-38385?
CVE-2022-38385 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-38385?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Cloud Pak For Security, Linux Linux Kernel.