CVE-2022-34319: Use of a Broken or Risky Cryptographic Algorithm

IBM CICS TX 11.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229463...

PT-2022-22134

Name of the Vulnerable Software and Affected Versions IBM CICS TX version 11.7 Description The issue allows an attacker to obtain sensitive information from HTTP response headers. Recommendations For IBM CICS TX version 11.7, at the moment, there is no information about a newer version that...

PT-2022-35120 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: The issue is related to the wifi ath10k driver, specifically with setting tx credit to one for WCN3990 snoc based devices. The actual impact and attack plausibility have not yet been proven...

PT-2022-22128

Name of the Vulnerable Software and Affected Versions IBM CICS TX version 11.7 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations For IBM CICS TX version 11.7, update ...

PT-2022-35194 · Broadcom · Bcm4908 Enet

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to the update of TX stats after actual transmission in the net: broadcom: bcm4908 enet component. The actual impact and attack plausibility have not yet been proven...

PT-2022-35028 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the net axienet switch to 64-bit RX/TX statistics. It is an automated ID intended to aid in the discovery of potential security vulnerabilities. The actual impact and attac...

CVE-2022-34315: Improper Neutralization of Input During Web Page Generation

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451...

PT-2022-35656

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220 Description The issue is related to the fsl lpuart serial driver in the Linux Kernel, where the DMA RX/TX use flags are not properly disabled in the lpuart dma shutdown function. The actual impact and...

IBM CICS TX 跨站脚本漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM CICS TX version 11.1 that stems from vulnerability to cross-site scripting...

PT-2022-35518

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description The issue is related to the fsl lpuart serial driver in the Linux Kernel, where the DMA RX/TX use flags are not properly disabled in the lpuart dma shutdown function. The actual impact and...

PT-2022-24539

Name of the Vulnerable Software and Affected Versions IBM CICS TX versions 11.1 Standard and Advanced Description The issue is caused by a reverse tabnabbing flaw, allowing a remote attacker to bypass security restrictions. An attacker could exploit this and redirect a victim to a phishing site...

CVE-2022-34314: Exposure of Sensitive Information to an Unauthorized Actor

IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450...

CVE-2022-34329: Exposure of Sensitive Information to an Unauthorized Actor

IBM CICS TX 11.7 could allow an attacker to obtain sensitive information from HTTP response headers. IBM X-Force ID: 229467...

PT-2022-22123

Name of the Vulnerable Software and Affected Versions IBM CICS TX version 11.1 Description The issue could disclose sensitive information to a local user due to insecure permission settings. Recommendations For IBM CICS TX version 11.1, update the permission settings to secure them and prevent...

CVE-2022-34317: Improper Neutralization of Input During Web Page Generation

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459...

CVE-2022-38705: Undefined Security Weakness

IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172...

CVE-2022-34320: Use of a Broken or Risky Cryptographic Algorithm

IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229464...

CVE-2022-34312: Exposure of Sensitive Information to an Unauthorized Actor

IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447...

Design/Logic Flaw

Hyperledger Fabric 2.3 allows attackers to cause a denial of service orderer crash by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist...

CVE-2022-45196: Always-Incorrect Control Flow Implementation

Hyperledger Fabric 2.3 allows attackers to cause a denial of service orderer crash by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist...