Security Bulletin: "Administration Console can process body parameters that were submitted in the query" may affect IBM TXSeries for Multiplatforms

Summary

“Administration Console can process body parameters that were submitted in the query” may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE and the fix has been provided as special fix uploaded in IBM Fix Central.

Vulnerability Details

CVEID:CVE-2023-33849
**DESCRIPTION:**IBM CICS TX Advanced could transmit highly sensitive information in query parameters that could be intercepted using man in the middle techniques.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/257105 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Remediation/Fixes

8.1

| AIX, Linux| PSIRT fixes will be only provided for extended support customers by request through Salesforce case.
IBM TXSeries for Multiplatforms|

8.2

| AIX, HP, Linux| Fix Central Link
IBM TXSeries for Multiplatforms|

9.1

| AIX, Linux| Fix Central Link

Workarounds and Mitigations

None