CVE-2022-34313

CVE-2022-34313 affects IBM CICS TX 11.1, where authorization tokens and session cookies are created without the secure attribute, enabling exposure of cookie values when users click on or load http:// links. The issue is documented across IBM advisories (Standard and Advanced) and external refere...

Denial Of Service (DoS)

github.com/hyperledger/fabric is vulnerable to Denial Of Service DoS. A remote attacker is able to cause a system panic by repeatedly sending a crafted channel tx with the same channel name, resulting in denial of service conditions...

IBM CICS TX 跨站脚本漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM CICS TX version 11.1 that stems from vulnerability to cross-site scripting...

IBM CICS TX 信息泄露漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. An information disclosure vulnerability exists in IBM CICS TX version 11.1 that originates from allowing web pages to be stored locally and be readable by other users on the system...

CVE-2022-34320: Use of a Broken or Risky Cryptographic Algorithm

IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229464...

PT-2022-35656

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220 Description The issue is related to the fsl lpuart serial driver in the Linux Kernel, where the DMA RX/TX use flags are not properly disabled in the lpuart dma shutdown function. The actual impact and...

PT-2022-35028 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the net axienet switch to 64-bit RX/TX statistics. It is an automated ID intended to aid in the discovery of potential security vulnerabilities. The actual impact and attac...

PT-2022-35194 · Broadcom · Bcm4908 Enet

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to the update of TX stats after actual transmission in the net: broadcom: bcm4908 enet component. The actual impact and attack plausibility have not yet been proven...

PT-2022-35120 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: The issue is related to the wifi ath10k driver, specifically with setting tx credit to one for WCN3990 snoc based devices. The actual impact and attack plausibility have not yet been proven...

PT-2022-22126 · Ibm · Ibm Cics Tx

Name of the Vulnerable Software and Affected Versions: IBM CICS TX version 11.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. Recommendations: Fo...

CVE-2022-38705: Undefined Security Weakness

IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172...

PT-2022-24539

Name of the Vulnerable Software and Affected Versions IBM CICS TX versions 11.1 Standard and Advanced Description The issue is caused by a reverse tabnabbing flaw, allowing a remote attacker to bypass security restrictions. An attacker could exploit this and redirect a victim to a phishing site...

PT-2022-22134

Name of the Vulnerable Software and Affected Versions IBM CICS TX version 11.7 Description The issue allows an attacker to obtain sensitive information from HTTP response headers. Recommendations For IBM CICS TX version 11.7, at the moment, there is no information about a newer version that...

PT-2022-35518

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description The issue is related to the fsl lpuart serial driver in the Linux Kernel, where the DMA RX/TX use flags are not properly disabled in the lpuart dma shutdown function. The actual impact and...

PT-2022-34876

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.7 Description The issue is related to the update of TX stats after actual transmission in the bcm4908 enet driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-22123

Name of the Vulnerable Software and Affected Versions IBM CICS TX version 11.1 Description The issue could disclose sensitive information to a local user due to insecure permission settings. Recommendations For IBM CICS TX version 11.1, update the permission settings to secure them and prevent...

CVE-2022-34315: Improper Neutralization of Input During Web Page Generation

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451...

CVE-2022-34318: Improper Restriction of Rendered UI Layers or Frames

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM...

CVE-2022-34312: Exposure of Sensitive Information to an Unauthorized Actor

IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447...

PT-2022-22121

Name of the Vulnerable Software and Affected Versions IBM CICS TX version 11.1 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM CICS TX version 11.1, consider implementing access controls to restrict...