Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-34313
HistoryNov 14, 2022 - 6:15 p.m.

CVE-2022-34313

2022-11-1418:15:17
CWE-200
[email protected]
web.nvd.nist.gov
7
ibm cics tx 11.1
secure attribute
authorization tokens
session cookies
cookie values
attacker
http link
x-force id.

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

35.3%

JSON

IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. X-Force ID: 229449.

Affected configurations

Nvd
Node
ibmcics_txMatch11.1advanced
OR
ibmcics_txMatch11.1standard
VendorProductVersionCPE
ibmcics_tx11.1cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*
ibmcics_tx11.1cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*

Related

ibm 2
cvelist 1
prion 1
cnvd 1
cve 1
ibm
ibm
Security Bulletin: IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies (CVE-2022-34313).
2023-02-14 21:14:53
Security Bulletin: IBM CICS TX Advanced is vulnerable to allowing an attacker to access an application via insecure session cookies (CVE-2022-34313).
2023-02-14 21:04:36
cvelist
cvelist
CVE-2022-34313 IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies
2022-11-14 17:05:53
prion
prion
Authorization
2022-11-14 18:15:00
cnvd
cnvd
IBM CICS TX Information Disclosure Vulnerability (CNVD-2022-83578)
2022-11-16 00:00:00
cve
cve
CVE-2022-34313
2022-11-14 18:15:17

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

35.3%

JSON
Related for NVD:CVE-2022-34313
ibm2cvelist1prion1cnvd1cve1