IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system.
Weakness
The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloud_pak_system | Ibm | 2.3.3.6 (including) | 2.3.3.6 (including) |
| Cloud_pak_system | Ibm | 2.3.3.7 (including) | 2.3.3.7 (including) |
| Cloud_pak_system | Ibm | 2.3.4.0 (including) | 2.3.4.0 (including) |
| Cloud_pak_system | Ibm | 2.3.4.1 (including) | 2.3.4.1 (including) |
| Cloud_pak_system | Ibm | 2.3.5.0 (including) | 2.3.5.0 (including) |