IBM CICS TX 安全漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A security vulnerability exists in CICS TX Standard version 11.1, CICS TX Advanced versions 10.1 and 11.1, and IBM TXSeries for Multiplatforms versions 8.1, 8.2, and 9.1, which stems from...

Security Bulletin: "Administration Console can process body parameters that were submitted in the query" may affect IBM CICS TX Advanced

Summary "Administration Console can process body parameters that were submitted in the query " may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-33849 DESCRIPTION: IBM CICS TX Advanced could transmit highly sensitive...

Security Bulletin: "Administration Console can process body parameters that were submitted in the query" may affect IBM CICS TX Standard

Summary "Administration Console can process body parameters that were submitted in the query" may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-33849 DESCRIPTION: IBM CICS TX Advanced could transmit highly sensitive...

Security Bulletin: "Administration Console can be switched to debug mode" may affect IBM CICS TX Advanced

Summary "Administration Console can be switched to debug mode" may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-33848 DESCRIPTION: IBM CICS TX could allow a privileged user to obtain highly sensitive information by enabli...

Security Bulletin: "Administration Console can be switched to debug mode" may affect IBM CICS TX Standard

Summary "Administration Console can be switched to debug mode" may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-33848 DESCRIPTION: IBM CICS TX could allow a privileged user to obtain highly sensitive information by enabli...

Security Bulletin: "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM CICS TX Advanced

Summary "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-33847 DESCRIPTION: IBM CICS TX does not set the secure attribute on authorization tokens or session...

Security Bulletin: "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM CICS TX Standard

Summary "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-33847 DESCRIPTION: IBM CICS TX does not set the secure attribute on authorization tokens or session...

Security Bulletin: "Reflected Cross Site Scripting" may affect IBM CICS TX Advanced

Summary "Reflected Cross Site Scripting" may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-33846 DESCRIPTION: IBM CICS TX is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript...

Security Bulletin: "Reflected Cross Site Scripting" may affect IBM CICS TX Standard

Summary "Reflected Cross Site Scripting" may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-33846 DESCRIPTION: IBM CICS TX is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript...

Security Bulletin: A vulnerability in Etcd-io could affect IBM CICS TX Advanced [CVE-2021-28235]

Summary CVE-2021-28235 related to etcd package could affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. CVE-2021-28235 Vulnerability Details CVEID:CVE-2021-28235 DESCRIPTION: Etcd-io could allow a remote attacker to gain elevated privileges on the system, caused b...

Security Bulletin: A vulnerability in Etcd-io could affect IBM CICS TX Standard [CVE-2021-28235]

Summary CVE-2021-28235 related to etcd package could affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. CVE-2021-28235 Vulnerability Details CVEID:CVE-2021-28235 DESCRIPTION: Etcd-io could allow a remote attacker to gain elevated privileges on the system, caused b...

Security Bulletin: CVE-2022-41723 and CVE-2022-41721 may affect IBM CICS TX Advanced

Summary CVE CVE-2022-41723 and CVE-2022-41721 may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVEs. Relevant Go related packages have been upgraded. Vulnerability Details CVEID:CVE-2022-41723 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by...

Security Bulletin: Vulnerability in Golang Go could affect IBM CICS TX Advanced [CVE-2023-24538]

Summary CVE-2023-24538 may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-24538 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary code on the system, caused by not properly consider backticks as...

Security Bulletin: Vulnerability in Golang Go could affect IBM CICS TX Standard [CVE-2023-24538]

Summary CVE-2023-24538 may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-24538 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary code on the system, caused by not properly consider backticks as...

Security Bulletin: Multiple Vulnerabilities (CVE-2023-24998, CVE-2023-1436) affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Multiple Vulnerabilities CVE-2023-24998, CVE-2023-1436 affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition. This fix resolves these vulnerabilities. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are...

Security Bulletin: CVE-2023-0482 may affect IBM CICS TX Advanced

Summary CVE-2023-0482 may affect IBM WebSphere Application Server Liberty supplied with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-0482 DESCRIPTION: RESTEasy could allow a local authenticated attacker to gain elevated privileg...

Security Bulletin: CVE-2023-0482 may affect IBM CICS TX Standard

Summary CVE-2023-0482 may affect IBM WebSphere Application Server Liberty supplied with IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-0482 DESCRIPTION: RESTEasy could allow a local authenticated attacker to gain elevated privileg...

Security Bulletin: CVE-2023-0286 may affect IBM CICS TX Advanced 10.1

Summary CVE-2023-0286 may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced 10.1 has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-0286 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a type confusion error related to X.400 address processing inside...

Security Bulletin: CVE-2023-24536, CVE-2023-24537, CVE-2023-24534 may affect IBM CICS TX Advanced

Summary CVE-2023-24536, CVE-2023-24537, CVE-2023-24534 may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-24536 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw during multipart form parsing. By...

Security Bulletin: CVE-2023-24536, CVE-2023-24537 and CVE-2023-24534 may affect IBM CICS TX Standard

Summary CVE-2023-24536, CVE-2023-24537, CVE-2023-24534 may affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-24536 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw during multipart form parsing. By...