Lucene search

K
ibmIBMD801EA268DE2927C7C3707356EBD0BAC68BCF0260D653E43341772EF91E06AC9
HistoryFeb 14, 2023 - 9:14 p.m.

Security Bulletin: IBM CICS TX Standard is vulnerable to a local user causing a denial of service. (CVE-2022-34308)

2023-02-1421:14:53
www.ibm.com
18
ibm cics tx standard
local user
denial of service
vulnerability
fix
cve-2022-34308

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

Summary

IBM CICS TX Standard could allow a local user to cause a denial of service due to improper load handling. The fix removes this vulnerability (CVE-2022-34308) from IBM CICS TX Standard.

Vulnerability Details

CVEID:CVE-2022-34308
**DESCRIPTION:**IBM CICS TX could allow a local user to cause a denial of service due to improper load handling.
CVSS Base score: 6.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/229437 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s) Version(s)
IBM CICS TX Standard 11.1

Remediation/Fixes

Product Version Defect Remediation
IBM CICS TX Standard 11.1 127847 Please follow the options here

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmcics_txMatch11.1standard
VendorProductVersionCPE
ibmcics_tx11.1cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

Related for D801EA268DE2927C7C3707356EBD0BAC68BCF0260D653E43341772EF91E06AC9