Medium · 4.3 CVE-2022-34311 EUVD-2022-37267GHSA-8v7m-h3c9-88g7

IBM CICS TX session fixation

Published Feb 12, 2024 · Updated May 6, 2025 · Assigned by ibm

Vendor: IBM Product: CICS TX Advanced Product: CICS TX Standard

Description

IBM CICS TX Standard and Advanced 11.1 could allow a user with physical access to the web browser to gain access to the user's session due to insufficiently protected credentials. IBM X-Force ID: 229446.

Affected products

Vendor	Product	Affected	Fixed
IBM	CICS TX Standard	11.1	—
IBM	CICS TX Advanced	11.1	—

References

https://www.ibm.com/support/pages/node/6832930 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/229446 vdb-entry
https://www.ibm.com/support/pages/node/6832928 vendor-advisory