Improper restriction of rendered UI layers or frames in  IBM CICS TX Standard

1) Improper Restriction of Rendered UI Layers or Frames

EUVDB-ID: #VU81235

Risk: Medium

CVSSv3.1: 5.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-34162

CWE-ID: CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Exploit availability: No

Description

The vulnerability allows a remote attacker to hijack the victim's click actions and possibly launch further attacks.

The vulnerability exists due to improper restriction of rendered UI layers or frames. Remote attacker can hijack the victim's click actions and possibly launch further attacks.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM CICS TX Standard: before 11.1.0.0 127733

CPE2.3

• cpe:2.3:a:ibm_corporation:ibm_cics_tx_standard:*:*:*:*:*:*:*:

External links

http://www.ibm.com/support/pages/node/6608198

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.