Lucene search

K
nvd[email protected]NVD:CVE-2022-34311
HistoryFeb 12, 2024 - 7:15 p.m.

CVE-2022-34311

2024-02-1219:15:09
CWE-522
web.nvd.nist.gov
ibm
cics
web access
vulnerability
unprotected credentials
x-force id 229446

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

IBM CICS TX Standard and Advanced 11.1 could allow a user with physical access to the web browser to gain access to the user’s session due to insufficiently protected credentials. IBM X-Force ID: 229446.

Affected configurations

NVD
Node
ibmcics_txMatch11.1advanced
OR
ibmcics_txMatch11.1standard

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

Related for NVD:CVE-2022-34311