Lucene search

K
nvd[email protected]NVD:CVE-2023-43018
HistoryNov 03, 2023 - 12:15 a.m.

CVE-2023-43018

2023-11-0300:15:12
CWE-250
CWE-269
web.nvd.nist.gov
ibm
cics tx
standard 11.1
advanced 10.1
11.1
vulnerability
privilege level

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.2%

IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 266163.

Affected configurations

NVD
Node
ibmcics_txMatch10.1advanced
OR
ibmcics_txMatch11.1advanced
OR
ibmcics_txMatch11.1standard
AND
linuxlinux_kernelMatch-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.2%

Related for NVD:CVE-2023-43018