CVE-2023-33848: IBM CICS TX information disclosure
First published: Tue Jun 06 2023(Updated: )
IBM CICS TX could allow a privileged user to obtain highly sensitive information by enabling debug mode.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM CICS Transaction Server for z/OS | <=11.1 | |
| IBM CICS Transaction Server for z/OS | =10.1 | |
| IBM CICS Transaction Server for z/OS | =11.1 | |
| IBM CICS Transaction Server for z/OS | =11.1 | |
| Linux kernel | ||
| IBM TXSeries for Multiplatform | =8.1 | |
| IBM TXSeries for Multiplatform | =9.1 | |
| IBM AIX | ||
| IBM TXSeries for Multiplatform | =8.2 | |
| HPE HP-UX |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-33848.
What is the severity of CVE-2023-33848?
The severity of CVE-2023-33848 is medium with a CVSS score of 6.5.
How can a privileged user obtain sensitive information in IBM CICS TX?
A privileged user can obtain highly sensitive information by enabling debug mode in IBM CICS TX Standard versions 11.1.
Which versions of IBM CICS TX are affected by CVE-2023-33848?
IBM CICS TX Standard versions 11.1, CICS TX Advanced versions 10.1 and 11.1.
How can I fix CVE-2023-33848?
You can fix CVE-2023-33848 by applying the patch provided by IBM for IBM CICS TX Standard version 11.1.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm cics transaction server for z/os
- version/ibm cics transaction server for z/os/11.1
- version/ibm cics transaction server for z/os/10.1
- vendor/linux
- canonical/linux kernel
- canonical/ibm txseries for multiplatform
- version/ibm txseries for multiplatform/8.1
- version/ibm txseries for multiplatform/9.1
- canonical/ibm aix
- version/ibm txseries for multiplatform/8.2
- vendor/hp
- canonical/hpe hp-ux