CVEvulnerability
CVE-2023-33849
3.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2023-06-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-311
Description
IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques. IBM X-Force ID: 257105.
Affected configurations
• ibm cics tx 10.1
• ibm cics tx 11.1
• ibm txseries for multiplatforms 8.1
• ibm txseries for multiplatforms 9.1
• ibm txseries for multiplatforms 8.2
Related
Weakness · CWE (1)
- CWE-311 Missing Encryption of Sensitive Data weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/257105 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/7001687 Vendor Advisory
- https://www.ibm.com/support/pages/node/7001695 Vendor Advisory
- https://www.ibm.com/support/pages/node/7001697 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/257105 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/7001687 Vendor Advisory
- https://www.ibm.com/support/pages/node/7001695 Vendor Advisory
- https://www.ibm.com/support/pages/node/7001697 Vendor Advisory