CVE-2023-33847

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a sit...

CVE-2023-33847

IBM TXSeries for Multiplatforms (versions 8.1–9.1) and IBM CICS TX Standard/Advanced (TX Standard 11.1; TX Advanced 10.1–11.1) expose a vulnerability where authorization tokens and session cookies are issued without the Secure attribute. This allows an attacker to obtain cookie values by luring a...

Security Bulletin: "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM CICS TX Advanced

Summary "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-33847 DESCRIPTION: IBM CICS TX does not set the secure attribute on authorization tokens or session...

Security Bulletin: "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM TXSeries for Multiplatforms

Summary "Cookie with Insecure or Improper or Missing SameSite attribute" may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE and the fix has been provided as special fix uploaded in IBM Fix Central. Vulnerability Details CVEID:CVE-2023-3384...