Lucene search

K
ibmIBM48CC87DC3FFED5C380E87220E324B6AF4A9023F6DA3646BDF11053233B01109E
HistoryJun 06, 2023 - 3:30 p.m.

Security Bulletin: "Administration Console can be switched to debug mode" may affect IBM CICS TX Standard

2023-06-0615:30:42
www.ibm.com
7
ibm cics tx standard
debug mode vulnerability
highly sensitive information
cve-2023-33848
cvss 4.9
linux platform
fix central link

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.5%

Summary

“Administration Console can be switched to debug mode” may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE.

Vulnerability Details

CVEID:CVE-2023-33848
**DESCRIPTION:**IBM CICS TX could allow a privileged user to obtain highly sensitive information by enabling debug mode.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/257104 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM CICS TX Standard 11.1

Remediation/Fixes

Product Version Platform Remediation/Fix
IBM CICS TX Standard

11.1

| Linux| Fix Central Link

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmcics_txMatch11.1
CPENameOperatorVersion
cics txeq11.1

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.5%

Related for 48CC87DC3FFED5C380E87220E324B6AF4A9023F6DA3646BDF11053233B01109E