SB2025041721 - Multiple vulnerabilities in IBM CICS TX Standard

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2025041721

SB2025041721 - Multiple vulnerabilities in IBM CICS TX Standard

Published: April 17, 2025

Security Bulletin ID SB2025041721
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Weak password requirements (CVE-ID: CVE-2020-15115)

The vulnerability allows an attacker to perform brute-force attack and guess the password.

The vulnerability exists due to weak password requirements in etcd. An attacker can perform a brute-force attack and guess users' passwords.


2) Input validation error (CVE-ID: CVE-2024-24790)

The vulnerability allows a remote attacker to modify application behavior.

The vulnerability exists due to improper handling of IPv4-mapped IPv6 addresses in net/netip within multiple methods, e.g. IsPrivate, IsLoopback. The affected methods return false for addresses which would return true in their traditional IPv4 forms, leading to potential bypass of implemented security features.


Remediation

Install update from vendor's website.

References