CVE-2023-33849: IBM CICS TX information disclosure
First published: Tue Jun 06 2023(Updated: )
IBM CICS TX Advanced could transmit highly sensitive information in query parameters that could be intercepted using man in the middle techniques.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM CICS Transaction Server for z/OS | <=11.1 | |
| IBM CICS Transaction Server for z/OS | =10.1 | |
| IBM CICS Transaction Server for z/OS | =11.1 | |
| IBM CICS Transaction Server for z/OS | =11.1 | |
| Linux kernel | ||
| IBM TXSeries for Multiplatform | =8.1 | |
| IBM TXSeries for Multiplatform | =9.1 | |
| IBM AIX | ||
| IBM TXSeries for Multiplatform | =8.2 | |
| HPE HP-UX |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-33849.
What software is affected by this vulnerability?
IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard 11.1, CICS TX Advanced 10.1 and 11.1 are affected by this vulnerability.
What is the severity of this vulnerability?
The severity of this vulnerability is low, with a CVSS score of 3.7.
How can the vulnerability be exploited?
The vulnerability can be exploited by intercepting sensitive information in query parameters using man-in-the-middle techniques.
How can I fix this vulnerability?
You can fix this vulnerability by applying the patches provided by IBM for the affected versions of IBM TXSeries for Multiplatforms. Please refer to the IBM support pages for more information.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/title
- agent/author
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm cics transaction server for z/os
- version/ibm cics transaction server for z/os/11.1
- version/ibm cics transaction server for z/os/10.1
- vendor/linux
- canonical/linux kernel
- canonical/ibm txseries for multiplatform
- version/ibm txseries for multiplatform/8.1
- version/ibm txseries for multiplatform/9.1
- canonical/ibm aix
- version/ibm txseries for multiplatform/8.2
- vendor/hp
- canonical/hpe hp-ux