Lucene search

IBM85E7C082F3C9F8202F0345AA72324A92F6812CD4FF436CDFCBD736F26FC2DE7C

HistoryOct 20, 2023 - 9:46 a.m.

Security Bulletin: Improper input validation may lead to a Denial of Service attack in web services with IBM TXSeries for Multiplatforms

2023-10-2009:46:19

www.ibm.com

ibm

txseries

multiplatforms

web services

cve-2023-42031

vulnerability

denial of service

input validation

security

bulletin

remediation

fix

workarounds

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.3%

JSON

Summary

Improper input validation may lead to a Denial of Service attack in web services with IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable issue.

Vulnerability Details

CVEID:CVE-2023-42031
**DESCRIPTION:**IBM CICS TX could allow a privileged user to cause a denial of service due to uncontrolled resource consumption.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/266061 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM TXSeries for Multiplatforms	8.1
IBM TXSeries for Multiplatforms	8.2
IBM TXSeries for Multiplatforms	9.1

Remediation/Fixes

Product	Version(s)	Platform(s)	Remediation/Fix
IBM TXSeries for Multiplatforms

8.1

| Linux, AIX| PSIRT fixes for TXSeries 8.1 will be provided only for extended support customers with request through Salesforce case
IBM TXSeries for Multiplatforms|

8.2

| Linux, AIX| Please refer to this documentation
IBM TXSeries for Multiplatforms|

9.1

| Linux, AIX| Please refer to this documentation

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtxseries_for_multiplatformsMatch8.1

ibmtxseries_for_multiplatformsMatch8.2

ibmtxseries_for_multiplatformsMatch9.1

CPENameOperatorVersion
txseries for multiplatformseq8.1
txseries for multiplatformseq8.2
txseries for multiplatformseq9.1

Name	Operator	Version
txseries for multiplatforms	eq	8.1
txseries for multiplatforms	eq	8.2
txseries for multiplatforms	eq	9.1

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

23.3%

JSON

Related for 85E7C082F3C9F8202F0345AA72324A92F6812CD4FF436CDFCBD736F26FC2DE7C