CVE-2022-34311: IBM CICS TX session fixation
IBM CICS TX could allow a user with physical access to the web browser to gain access to the user's session due to insufficiently protected credentials.
Other sources
IBM CICS TX Standard and Advanced 11.1 could allow a user with physical access to the web browser to gain access to the user's session due to insufficiently protected credentials. IBM X-Force ID: 229446.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-34311?
CVE-2022-34311 has a severity rating that indicates a significant risk for unauthorized access if physical security is compromised.
How do I fix CVE-2022-34311?
To fix CVE-2022-34311, apply the latest patch provided by IBM for CICS TX Standard and Advanced version 11.1.
Who is affected by CVE-2022-34311?
CVE-2022-34311 affects users of IBM CICS TX Standard and Advanced versions 11.1 with physical access to the web browser.
What is the impact of CVE-2022-34311?
The impact of CVE-2022-34311 allows an attacker with physical access to the web browser to gain unauthorized access to a user's session.
Is CVE-2022-34311 a local or remote vulnerability?
CVE-2022-34311 is considered a local vulnerability, as it requires physical access to the affected system.