CVE-2023-38361: IBM CICS TX Advanced information disclosure

Q: What is the severity of CVE-2023-38361?

The severity of CVE-2023-38361 is medium with a CVSS score of 5.9.

Q: What is the vulnerability description of CVE-2023-38361?

CVE-2023-38361 is an information disclosure vulnerability in IBM CICS TX Advanced 10.1 that allows an attacker to decrypt highly sensitive information.

Q: Which software version is affected by CVE-2023-38361?

CVE-2023-38361 affects IBM CICS TX Advanced version 10.1.

Q: How can I fix CVE-2023-38361?

To fix CVE-2023-38361, apply the patch provided by IBM for CICS TX Advanced version 10.1.

Q: Where can I find more information about CVE-2023-38361?

For more information about CVE-2023-38361, you can visit the IBM support page or the IBM X-Force Exchange.

Published Nov 3, 2023

Updated

IBM CICS TX Advanced 10.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 260770.

Other sources

IBM CICS TX Advanced uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected Software

3 affected componentsFixes available

IBM CICS TX Advanced<=10.1

All of the following

IBM CICS TX=10.1

Linux Linux kernel

Remediation

Patch Available

https://www.ibm.com/support/pages/node/7066431

Event History

Nov 3, 2023

CVE Published

12:00 AM

Nov 18, 2023

Data Sourced

05:24 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7066431

Frequently Asked Questions

What is the severity of CVE-2023-38361?

The severity of CVE-2023-38361 is medium with a CVSS score of 5.9.

What is the vulnerability description of CVE-2023-38361?