Lucene search

IBM79D1291F950EC1F36B0E996ED690D9051C89161A816E4E48C5738F879D770352

HistoryOct 31, 2023 - 12:53 p.m.

Security Bulletin: "Cross Site Request Forgery" affects IBM CICS TX Advanced and IBM CICS TX Standard

2023-10-3112:53:00

www.ibm.com

ibm cics tx

cross site request forgery

vulnerability

ibm cics tx advanced

ibm cics tx standard

cvss base score

remediation

fix

linux

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

27.9%

JSON

Summary

“Cross Site Request Forgery” affects IBM CICS TX Advanced and IBM CICS TX Standard. IBM CICS TX Advanced and IBM CICS TX Standard have addressed the applicable vulnerability.

Vulnerability Details

CVEID:CVE-2023-42027
**DESCRIPTION:**IBM CICS TX is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/266057 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM CICS TX Advanced	10.1
IBM CICS TX Advanced	11.1
IBM CICS TX Standard	11.1

Remediation/Fixes

Product	Version	Platform	Remediation / Fix
IBM CICS TX Advanced

10.1

| Linux| Fix Central Link
IBM CICS TX Advanced|

11.1

| Linux| Fix Central Link
IBM CICS TX Standard|

11.1

| Linux| Fix Central Link

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmcics_txMatch10.1

ibmcics_txMatch11.1

VendorProductVersionCPE
ibmcics_tx10.1cpe:2.3:a:ibm:cics_tx:10.1:*:*:*:*:*:*:*
ibmcics_tx11.1cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	cics_tx	10.1	cpe:2.3:a:ibm:cics_tx:10.1:::::::*
ibm	cics_tx	11.1	cpe:2.3:a:ibm:cics_tx:11.1:::::::*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

27.9%

JSON

Related for 79D1291F950EC1F36B0E996ED690D9051C89161A816E4E48C5738F879D770352