3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
35.0%
“Cookie with Insecure or Improper or Missing SameSite attribute” may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE and the fix has been provided as special fix uploaded in IBM Fix Central.
CVEID:CVE-2023-33847
**DESCRIPTION:**IBM CICS TX does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/257102 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected Product(s) | Version(s) |
---|---|
IBM TXSeries for Multiplatforms | 8.1 |
IBM TXSeries for Multiplatforms | 8.2 |
IBM TXSeries for Multiplatforms | 9.1 |
Product | Version | Platform | Remediation/Fix |
---|---|---|---|
IBM TXSeries for Multiplatforms |
8.1
| AIX, Linux| PSIRT fixes will be only provided for extended support customers by request through Salesforce case.
IBM TXSeries for Multiplatforms|
8.2
| AIX, HP, Linux| Fix Central Link
IBM TXSeries for Multiplatforms|
9.1
| AIX, Linux| Fix Central Link
None
CPE | Name | Operator | Version |
---|---|---|---|
txseries for multiplatforms | eq | 8.1 | |
txseries for multiplatforms | eq | 8.2 | |
txseries for multiplatforms | eq | 9.1 |
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
35.0%