Skip to content
OpenAdvisories
Medium WID-SEC-2023-1381 4 CVEs

IBM TXSeries: Mehrere Schwachstellen

Published Jun 6, 2023 · Updated Jun 6, 2023 · de-DE

Vendor: IBM Product: TXSeries Product: TXSeries 8.1 Product: TXSeries 8.2 Product: TXSeries 9.1 Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM TXSeries ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und Informationen offenzulegen.

Product

IBM TXSeries ist eine Umgebung für "Online Transaction Processing (OLTP)".

Vulnerabilities 4

  • Medium 5.4
    CVE-2023-33846

    IBM CICS TX cross-site scripting

    IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functiona…

    IBM CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms
  • Medium 4.9
    CVE-2023-33848

    IBM CICS TX information disclosure

    IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could allow a privileged user to obtain highly sensitive information by enabling debug mode. IBM X-Force ID: 257104.

    IBM CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms
  • Low 3.7
    CVE-2023-33847

    IBM CICS TX information disclosure

    IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a …

    IBM CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms
  • Low 3.7
    CVE-2023-33849

    IBM CICS TX information disclosure

    IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques. IBM X-Force ID: 257105.

    IBM CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms

Revision history

  1. #1

    Initiale Fassung

References