Lucene search
HistoryJan 08, 2024 - 3:15 a.m.
CVE-2023-47140
ibm
cics
transaction gateway
9.3
improper access control
file transfer
file view
nvd
cve-2023-47140
security vulnerability
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
7.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.7%
IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls. IBM X-Force ID: 270259.
Affected configurations
Node
ibmcics_transaction_gatewayMatch9.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | cics_transaction_gateway | 9.3 | cpe:2.3:a:ibm:cics_transaction_gateway:9.3:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "CICS Transaction Gateway Containers",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.3"
}
]
}
]References
Social References
More
Related
prion
prion
Improper access control
2024-01-08 03:15:00
cnvd
cnvd
IBM CICS Transaction Gateway Access Control Error Vulnerability
2024-01-11 00:00:00
cvelist
cvelist
CVE-2023-47140 IBM CICS Transaction Gateway improper access controls
2024-01-08 02:08:00
nvd
nvd
CVE-2023-47140
2024-01-08 03:15:13
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
7.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.7%
Related for CVE-2023-47140