IBM CICS TX information disclosure
CVE-2022-34316

3.7LOW

Key Information:

Vendor
IBM
Status
Cics Tx
Vendor
CVE Published:
14 November 2022

Summary

IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.

Affected Version(s)

CICS TX 11.1

References

https://www.ibm.com/support/pages/node/6833176
vendor-advisory
https://www.ibm.com/support/pages/node/6833178
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/229452
vdb-entry

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.