CVE-2023-33849: IBM CICS TX information disclosure
IBM CICS TX Advanced could transmit highly sensitive information in query parameters that could be intercepted using man in the middle techniques.
Other sources
IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques. IBM X-Force ID: 257105.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-33849.
What software is affected by this vulnerability?
IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard 11.1, CICS TX Advanced 10.1 and 11.1 are affected by this vulnerability.
What is the severity of this vulnerability?
The severity of this vulnerability is low, with a CVSS score of 3.7.
How can the vulnerability be exploited?
The vulnerability can be exploited by intercepting sensitive information in query parameters using man-in-the-middle techniques.
How can I fix this vulnerability?
You can fix this vulnerability by applying the patches provided by IBM for the affected versions of IBM TXSeries for Multiplatforms. Please refer to the IBM support pages for more information.