Security Bulletin: IBM CICS TX Standard is vulnerable to attack due to missing or insecurely formatted HTTP headers (CVE-2022-34316).

Summary

IBM CICS TX Standard could allow an attack due to missing or insecurely formatted HTTP headers. The fix removes this vulnerability (CVE-2022-34316) from IBM CICS TX Standard.

Vulnerability Details

CVEID:CVE-2022-34316
**DESCRIPTION:**IBM CICS TX does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/229452 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Remediation/Fixes

Product |

Version

|

Defect

|

Remediation / First Fix

—|—|—|—

IBM CICS TX Standard

|

11.1

|

127920

| Download fix here

Workarounds and Mitigations

None