3.7

CVE-2023-33849

IBM CICS TX information disclosure

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques.  IBM X-Force ID:  257105.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Cics Tx Version 10.1 SwEdition advanced
   Linux ≫ Linux Kernel Version -
Ibm ≫ Cics Tx Version 11.1 SwEdition advanced
   Linux ≫ Linux Kernel Version -
Ibm ≫ Cics Tx Version 11.1 SwEdition standard
   Linux ≫ Linux Kernel Version -
Ibm ≫ Txseries For Multiplatforms Version 8.1
   Ibm ≫ Aix Version -
   Linux ≫ Linux Kernel Version -
Ibm ≫ Txseries For Multiplatforms Version 9.1
   Ibm ≫ Aix Version -
   Linux ≫ Linux Kernel Version -
Ibm ≫ Txseries For Multiplatforms Version 8.2
   Hp ≫ Hp-ux Version -
   Ibm ≫ Aix Version -
   Linux ≫ Linux Kernel Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.296
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.7 2.2 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
IBM 3.7 2.2 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-311 Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

https://exchange.xforce.ibmcloud.com/vulnerabilities/257105
Vendor Advisory
VDB Entry
https://www.ibm.com/support/pages/node/7001687
Vendor Advisory
https://www.ibm.com/support/pages/node/7001695
Vendor Advisory
https://www.ibm.com/support/pages/node/7001697
Vendor Advisory