Lucene search

K
ibmIBMFD1C999A31C3889E0C7503B2BD26B45D8C4763A2DDCD64C83C370E66C59D6B85
HistoryFeb 14, 2023 - 9:14 p.m.

Security Bulletin: IBM CICS TX Standard is vulnerable to allowing web pages to be stored locally which can then be accessed by other users on the system (CVE-2022-34312).

2023-02-1421:14:53
www.ibm.com
16
ibm cics tx standard
vulnerability
stored locally
web pages
cve-2022-34312

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

17.2%

Summary

IBM CICS TX Standard could allow web pages to be sored locally which can then be accessed by other users on the system. The fix removes this vulnerability (CVE-2022-34312) from IBM CICS TX Standard.

Vulnerability Details

CVEID:CVE-2022-34312
**DESCRIPTION:**IBM CICS TX allows web pages to be stored locally which can be read by another user on the system.
CVSS Base score: 4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/229447 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM CICS TX Standard All

Remediation/Fixes

Product

|

Version

|

Defect

|

Remediation / First Fix

—|—|—|—

IBM CICS TX Standard

|

11.1

|

127902

| Download fix here

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmcics_txMatchanystandard
VendorProductVersionCPE
ibmcics_txanycpe:2.3:a:ibm:cics_tx:any:*:*:*:standard:*:*:*

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

17.2%

Related for FD1C999A31C3889E0C7503B2BD26B45D8C4763A2DDCD64C83C370E66C59D6B85