CVE-2022-38387

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 233786.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

History

07 Nov 2023, 03:50

Type Values Removed Values Added
Summary IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 233786. IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 233786.

Information

Published : 2022-11-11 19:15

Updated : 2024-02-28 19:29


NVD link : CVE-2022-38387

Mitre link : CVE-2022-38387

CVE.ORG link : CVE-2022-38387


JSON object : View

Products Affected

linux

  • linux_kernel

ibm

  • cloud_pak_for_security
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')