CVE-2022-34312

CVE-2022-34312 affects IBM CICS TX 11.1. The vulnerability allows web pages to be stored locally and read by another user on the same system, constituting an information disclosure. Affected products include IBM CICS TX Standard and IBM CICS TX Advanced (both 11.1). The issue’s base metrics show ...

CVE-2022-34329 IBM CICS TX information disclosure

IBM CICS TX 11.7 could allow an attacker to obtain sensitive information from HTTP response headers. IBM X-Force ID: 229467...

CVE-2022-34329 IBM CICS TX information disclosure

IBM CICS TX 11.7 could allow an attacker to obtain sensitive information from HTTP response headers. IBM X-Force ID: 229467...

CVE-2022-34329

CVE-2022-34329 – IBM CICS TX 11.7 information disclosure . The available documents confirm a vulnerability in IBM CICS TX 11.7 where an attacker could obtain sensitive information from HTTP response headers. The CVSS baseline in the sources is 5.3 (MEDIUM) with network access, low confidentiality...

CVE-2022-34319 IBM CICS TX information disclosure

IBM CICS TX 11.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229463...

CVE-2022-34319 IBM CICS TX information disclosure

IBM CICS TX 11.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229463...

CVE-2022-34319

CVE-2022-34319 affects IBM CICS TX family: specifically IBM CICS TX 11.7 uses weaker cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Connected documents also reference IBM CICS TX Standard/Advanced around version 11.1 and indicate fixes/remediations ...

CVE-2022-34313 IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies

IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can...

CVE-2022-34313 IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies

IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can...

CVE-2022-34313

CVE-2022-34313 affects IBM CICS TX 11.1, where authorization tokens and session cookies are created without the secure attribute, enabling exposure of cookie values when users click on or load http:// links. The issue is documented across IBM advisories (Standard and Advanced) and external refere...

CVE-2022-34314: Exposure of Sensitive Information to an Unauthorized Actor

IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450...

CVE-2022-34312: Exposure of Sensitive Information to an Unauthorized Actor

IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447...

IBM CICS TX 跨站脚本漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM CICS TX version 11.1 that stems from vulnerability to cross-site scripting...

CVE-2022-34313: Exposure of Sensitive Information to an Unauthorized Actor

IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can...

PT-2022-22126 · Ibm · Ibm Cics Tx

Name of the Vulnerable Software and Affected Versions: IBM CICS TX version 11.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. Recommendations: Fo...

CVE-2022-34317: Improper Neutralization of Input During Web Page Generation

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459...

CVE-2022-38705: Undefined Security Weakness

IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172...

PT-2022-24539

Name of the Vulnerable Software and Affected Versions IBM CICS TX versions 11.1 Standard and Advanced Description The issue is caused by a reverse tabnabbing flaw, allowing a remote attacker to bypass security restrictions. An attacker could exploit this and redirect a victim to a phishing site...

CVE-2022-34316: Improper Neutralization of HTTP Headers for Scripting Syntax

IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452...

CVE-2022-34320: Use of a Broken or Risky Cryptographic Algorithm

IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229464...