Lucene search

K
ibmIBMB577E8DB87DC09CF7A9D227A4AAB5E6ED3C8D6B008B433F927F790CA43CDF4FA
HistoryJun 06, 2023 - 5:57 p.m.

Security Bulletin: "Administration Console can be switched to debug mode" may affect IBM TXSeries for Multiplatforms

2023-06-0617:57:56
www.ibm.com
11
ibm
txseries
multiplatforms
debug mode
vulnerability
cve-2023-33848
fix
ibm fix central

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.5%

Summary

“Administration Console can be switched to debug mode” may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE and the fix has been provided as special fix uploaded in IBM Fix Central.

Vulnerability Details

CVEID:CVE-2023-33848
**DESCRIPTION:**IBM CICS TX could allow a privileged user to obtain highly sensitive information by enabling debug mode.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/257104 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM TXSeries for Multiplatforms 8.1
IBM TXSeries for Multiplatforms 8.2
IBM TXSeries for Multiplatforms 9.1

Remediation/Fixes

Product Version Platform Remediation/Fix
IBM TXSeries for Multiplatforms

8.1

| AIX, Linux| PSIRT fixes will be only provided for extended support customers by request through Salesforce case.
IBM TXSeries for Multiplatforms|

8.2

| AIX, HP, Linux| Fix Central Link
IBM TXSeries for Multiplatforms|

9.1

| AIX, Linux| Fix Central Link

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmtxseries_for_multiplatformsMatch8.1
OR
ibmtxseries_for_multiplatformsMatch8.2
OR
ibmtxseries_for_multiplatformsMatch9.1

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.5%

Related for B577E8DB87DC09CF7A9D227A4AAB5E6ED3C8D6B008B433F927F790CA43CDF4FA