Lucene search

K
ibmIBMD74CEC53F059D32AD4FE59ACAA67C76D9E9C8288F8B3BB927C9608C81FD33DEF
HistoryJun 06, 2023 - 5:51 p.m.

Security Bulletin: "Administration Console can be switched to debug mode" may affect IBM CICS TX Advanced

2023-06-0617:51:40
www.ibm.com
11
ibm cics tx advanced
debug mode vulnerability
version 10.1
version 11.1
fix
linux

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.5%

Summary

“Administration Console can be switched to debug mode” may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE.

Vulnerability Details

CVEID:CVE-2023-33848
**DESCRIPTION:**IBM CICS TX could allow a privileged user to obtain highly sensitive information by enabling debug mode.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/257104 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM CICS TX Advanced 10.1
IBM CICS TX Advanced 11.1

Remediation/Fixes

Product Version Platform Remediation/Fix
IBM CICS TX Advanced

10.1

| Linux| Fix Central Link
IBM CICS TX Advanced|

11.1

| Linux| Fix Central Link

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmcics_txMatch10.1
OR
ibmcics_txMatch11.1
CPENameOperatorVersion
cics txeq10.1
cics txeq11.1

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.5%

Related for D74CEC53F059D32AD4FE59ACAA67C76D9E9C8288F8B3BB927C9608C81FD33DEF