Lucene search

IBM006C799EA48A704A8E2B36B7A8578BF66BD1E2F5748C56993A27CDE12276DAE6

HistoryFeb 15, 2024 - 12:45 p.m.

Security Bulletin: There is a vulnerability in IBM Semeru Runtime that is shipped with CICS Transaction Gateway for Multiplatforms (CVE-2023-21968).

2024-02-1512:45:04

www.ibm.com

ibm semeru runtime

cics transaction gateway for multiplatforms

vulnerability

upgrade

ibm

oracle java se

graalvm enterprise edition

cve-2023-21968

fix central

linux

windows

aix

intel

ibm z

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.7%

JSON

Summary

There is a vulnerability in IBM Semeru Runtime that is shipped with CICS Transaction Gateway for Multiplatforms (CVE-2023-21968). An update to CICS Transaction Gateway for Multiplatforms has been released to address this vulnerability.

Vulnerability Details

CVEID:CVE-2023-21968
**DESCRIPTION:**An unspecified vulnerability in Oracle Java SE and GraalVM Enterprise Edition related to the Libraries component could allow an unauthenticated attacker to cause low integrity impact.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/253083 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM CICS Transaction Gateway for Multiplatforms	9.3

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now by upgrading IBM CICS Transaction Gateway for Multiplatforms.

Product	Version	Platform	Remediation/Fix
CICS Transaction Gateway for Multiplatforms

9.3

| Linux on POWER Big Endian|