CVE-2022-31767: OS Command Injection

Q: What is CVE-2022-31767?

CVE-2022-31767 is a vulnerability in IBM CICS TX Standard and Advanced 11.1 that allows a remote attacker to execute arbitrary commands on the system.

Q: How can an attacker exploit CVE-2022-31767?

An attacker can exploit CVE-2022-31767 by sending a specially crafted request to the system.

Q: What is the severity of CVE-2022-31767?

CVE-2022-31767 has a severity rating of 9.8 (Critical).

Q: Which versions of IBM CICS TX are affected by CVE-2022-31767?

IBM CICS TX Standard version up to and including 11.1, and IBM CICS TX Advanced version 11.1 are affected by CVE-2022-31767.

Q: How can I fix CVE-2022-31767?

You can fix CVE-2022-31767 by applying the patch provided by IBM for CICS TX Advanced version 11.1.

Published Jun 6, 2022

Updated

IBM CICS TX could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request.

Other sources

IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 227980.

Affected Software

4 affected components

IBM CICS TX Standard<=All

IBM CICS TX<11.1

IBM CICS TX=11.1

Linux Linux kernel

Event History

Jun 6, 2022

CVE Published

via IBM·12:00 AM

Jun 24, 2022

CVE Published

via MITRE·03:35 PM

Data Sourced

via MITRE·03:35 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6597533

Frequently Asked Questions

What is CVE-2022-31767?

CVE-2022-31767 is a vulnerability in IBM CICS TX Standard and Advanced 11.1 that allows a remote attacker to execute arbitrary commands on the system.

How can an attacker exploit CVE-2022-31767?