IBM Cloud Pak System 2.3.5.0 is vulnerable to information disclosure due to the insertion of credentials into log files. This allows a local attacker to obtain sensitive information by accessing these logs. The vulnerability is categorized under CWE-798, which involves exposure of credentials. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact. No official patch or fix information is available at this time.

A local attacker can gain access to sensitive credentials by reading log files where these credentials are improperly recorded. This exposure can lead to unauthorized access or further compromise of the system. The confidentiality impact is high, but integrity and availability are not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to log files and monitor for unauthorized access to sensitive information within logs.