Lucene search

IBMF1457D151C8E4923B6F8BDABA35051434998D881AB19E0CBA8DFCC149BD62CA8

HistoryNov 03, 2023 - 5:53 p.m.

Security Bulletin: "Hidden Directory Detected" vulnerability may affect IBM CICS TX Advanced 10.1

2023-11-0317:53:08

www.ibm.com

ibm

cics tx advanced

vulnerability

Summary

“Hidden Directory Detected” vulnerability may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced has addressed the applicable vulnerability.

Vulnerability Details

CVEID:CVE-2023-38362
**DESCRIPTION:**IBM CICS TX Advanced could disclose sensitive information to a remote attacker due to observable discrepancy in HTTP responses.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/260814 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM CICS TX Advanced	10.1

Remediation/Fixes

Product	Version	Platform	Remediation / Fix
IBM CICS TX Advanced

10.1

| Linux| Fix Central link

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmcics_txMatch10.1

VendorProductVersionCPE
ibmcics_tx10.1cpe:2.3:a:ibm:cics_tx:10.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	cics_tx	10.1	cpe:2.3:a:ibm:cics_tx:10.1:::::::*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for F1457D151C8E4923B6F8BDABA35051434998D881AB19E0CBA8DFCC149BD62CA8